Data Protection & Player Privacy
At iron88, your privacy is not just a line in a legal document. It is a responsibility we take seriously every day. This Privacy Policy clearly explains what data we collect, why we need it, how we protect it, and your rights as a player to control your own personal information.
Our comprehensive approach to data security ensures your personal information remains protected at all times.
All data transmitted between your browser and iron88 servers is protected by 256-bit SSL encryption — the same security standard used by leading Malaysian banking institutions such as Maybank and CIMB. No third party can intercept your data in transit.
Your personal data is stored on servers protected by multi-layered firewalls, intrusion detection systems, and strict access controls. Only staff with specific authorisation may access the iron88 customer database, and all access is logged and audited.
Iron88 never sells, rents, or trades your personal information to any third party for marketing purposes. Your data is used solely for the purposes you consented to — nothing more. This is a line we will not cross.
All transactions in MYR (RM) via Touch 'n Go eWallet, GrabPay, DuitNow, or FPX are processed with the highest level of confidentiality. Your payment details are not shared with any party other than payment processors that have been verified for security.
You have full rights to access, correct, and delete your personal data on iron88. Data access and deletion requests are processed within 30 days. You may also withdraw your marketing consent at any time through your account settings.
Iron88 complies with applicable data protection requirements and follows best practices in the international online gambling industry. Our Privacy Policy is updated regularly to reflect the latest changes in legislation and security technology.
This Privacy Policy describes iron88's privacy practices regarding the collection, use, storage, and protection of players' personal data. By using the iron88 platform, you agree to the terms set out in this Privacy Policy. Please read it carefully before registering an account.
This Privacy Policy is issued by iron88 ("we", "the platform", "iron88") and applies to all users who register, browse, or use the services provided through the iron88.best website and any related platforms. This document explains in detail how we manage the personal data of Malaysian players who use our online casino, slots, Sports Betting, and table games platform.
Iron88 understands that your trust is the foundation of our relationship. Malaysian players who use our platform to enjoy slots, Live Casino, Malaysian Super League football betting, or BWF badminton betting deserve to know exactly how their information is handled. We don't hide anything behind complex legal language — this Privacy Policy is written in plain, straightforward terms.
Iron88's Privacy Policy reflects international best practices in data protection. Players from Malaysia are protected under the relevant data protection framework. Any privacy-related disputes will be resolved in accordance with applicable law and iron88's established internal policies.
When you register an account on iron88 or use our services, you provide us with certain personal information. This data is collected because we need it to operate your account securely and process transactions in Malaysian Ringgit (MYR):
When you use the iron88 platform — whether through a web browser on your computer or smartphone — our systems automatically record certain technical information required for security and service improvement:
| Data Type | Example | Primary Purpose |
|---|---|---|
| Identity | Name, MyKad, date of birth | Account verification, 18+ age compliance |
| Contact | Email, phone number | Communications, OTP, notifications |
| Financial | TNG account number, DuitNow | RM deposits and withdrawals |
| Technical | IP address, device type | Security, fraud detection |
| Games | Betting history, winnings | Responsible gaming, support |
Iron88 only uses your personal data for lawful and specific purposes. We do not use your data for any other purpose without informing you in advance and obtaining your consent where required. The purposes for which data is used are as follows:
Your name, email, phone number, and MyKad information are used to create and manage your iron88 account, verify your identity, process logins securely, and ensure only you can access your account. This includes sending OTP codes via SMS to your Malaysian phone number for two-factor authentication.
Your financial information is used solely to process deposits and withdrawals in MYR via your chosen method — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX (Maybank2u, CIMB Clicks). This information is not used for any purpose other than processing the transactions you initiate.
Technical data such as IP addresses, device information, and account activity patterns are used by iron88's security systems to detect and prevent fraudulent activity, multiple account creation, bot usage, and bonus abuse attempts. This protects you and all other players on the platform.
When you reach out to iron88's customer support team via live chat, email, or WhatsApp, our support staff may access your relevant account details and transaction history to provide faster and more accurate assistance. This access is strictly limited to the information needed to resolve your issue.
Your gaming activity data — including session frequency, bet amounts, and win/loss patterns — is analysed by iron88's responsible gambling system to identify players who may need support. If your playing patterns show signs of concern, we may proactively reach out to you via email to offer assistance.
If you gave your consent during registration, iron88 may send you information about new promotions, reload bonuses, Sports Betting offers for the Malaysia Super League or EPL, and platform updates via email or in-app notifications. You can opt out of marketing communications at any time using the "unsubscribe" link in any email or through your account settings.
Iron88 takes a highly cautious approach to data sharing. We does not sell your personal data to any third party for marketing or commercial purposes. However, there are limited situations where sharing data with certain parties is necessary to operate our platform:
To process deposits and withdrawals in RM, we share the necessary transaction information with verified payment processors — including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow operators, and the banks participating in the FPX system. This data sharing is limited to what is strictly necessary for transaction processing and is subject to strict confidentiality agreements with the relevant providers.
World-class game providers that partner with iron88 — such as slots and live casino providers — may receive minimal technical data (such as game session IDs) required to operate games correctly. They do not receive personally identifiable information such as your full name or identification card number.
Iron88 may be required to disclose your personal information where mandated by law, court order, or direction from a lawful authority. In such circumstances, we will disclose only the minimum information necessary and, where permitted by law, will notify you of the disclosure.
Iron88 does not share your data with advertising companies, data brokers, or any third party for marketing purposes. If you receive an offer claiming to be from an iron88 partner without your prior consent, please report it to our support team immediately.
Iron88 continuously invests in cybersecurity infrastructure to keep your personal data and financial information protected at all times. Here are the security layers we have in place:
Personal data stored in the iron88 database — including passwords, identification numbers, and financial information — is encrypted using industry-standard encryption algorithms. Your password is stored as a one-way hash that cannot be decrypted, meaning even iron88 staff are unable to read your actual password.
Access to player personal data within iron88 is restricted on a least-privilege basis — each staff member can only access the data necessary for their specific job responsibilities. All access to the customer database is logged and audited on a regular basis. Violations of internal access policy are treated as serious offences and may result in disciplinary action.
In the event of a security incident involving players' personal data (a data breach), iron88 is committed to notifying affected players within 72 hours of the incident being confirmed. The notification will include details on the type of data affected, the steps taken, and the actions we recommend you take. iron88 will also report serious incidents to the relevant authorities in accordance with legal requirements.
The iron88 platform uses cookies and similar tracking technologies to enhance your experience and maintain platform security. Understanding how we use cookies helps you make more informed decisions about your privacy.
You can manage and delete cookies through your web browser settings. However, disabling essential cookies (session and security) will affect the functionality of the iron88 platform — you may be unable to log in or use the games properly. Optional cookies such as analytics cookies can be disabled without affecting your core gaming experience.
As a registered iron88 player, you have the following rights regarding your personal data. All data rights requests can be submitted to us by email at support@iron88.best or via live chat within the platform.
Request a copy of all personal data iron88 holds about you. We will provide a full report within 30 days from the date the request is received.
Correct any inaccurate or outdated personal information in your account. Basic information corrections can be made directly through your account settings.
Request the deletion of your personal data upon account closure, subject to the minimum statutory data retention requirements we are obligated to comply with.
Object to the use of your data for marketing or analytics purposes. You may withdraw your marketing consent at any time without penalty.
Request your personal data in a machine-readable format (such as CSV) for the purpose of transferring it to another platform if needed.
Request iron88 to restrict the processing of your data in certain situations, such as while a dispute regarding data accuracy is being resolved.
To submit any data rights request, contact us at support@iron88.best with the subject line "Privacy Data Rights Request" and include your iron88 username. We are committed to processing all valid requests within 30 business days.
Iron88 retains your personal data for as long as necessary to fulfil the original purpose of collection, or as required by law. The following outlines our data retention guidelines:
Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be linked to you personally. Anonymised data may be retained for statistical and service improvement purposes.
Iron88 is an online casino and betting platform restricted to individuals aged 18 and above only. We do not knowingly collect, store, or process the personal data of any individual under the age of 18.
If you are a parent or guardian who believes your underage child has registered an account on iron88, please contact us immediately at support@iron88.best. We will investigate the matter, close the account in question, and delete all associated data promptly, no questions asked. The safety and protection of children is our absolute priority.
Iron88 performs an age check during registration and may require identity verification via MyKad to confirm you are 18 years of age or older. Providing false age information is a serious breach of our Terms & Conditions and may result in account closure and forfeiture of all associated funds.
Iron88 reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, the latest security technology, or new legal requirements. Any material amendments will be communicated to registered players via email and in-platform notifications at least 14 days before the changes take effect.
The "Updated" date shown at the top of this page reflects when this Privacy Policy was last revised. We encourage you to check this page periodically to stay informed about how we protect your privacy.
For any enquiries, concerns, or complaints relating to your privacy and personal data protection at iron88, you may reach us through the following channels:
We take every privacy complaint seriously and are committed to resolving all enquiries fairly and transparently. If you are not satisfied with our response, you have the right to refer the matter to the relevant authority.
Create an account in under 2 minutes, deposit via Touch 'n Go eWallet or DuitNow, and enjoy over 300 games backed by world-class privacy and data security standards.
To fully understand your rights and responsibilities as an iron88 player, please also read Terms & Conditions our complete policy. For information on how to play responsibly, visit the Responsible Gambling. For general questions about the platform, refer to FAQ us. More information about iron88 can be found on the About Us.