Iron66 takes the privacy of every Malaysian player seriously. This Privacy Policy transparently explains how we collect, use, store, and protect your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).
Here is how we ensure your personal data remains protected and respected at all times
All data transmitted between your device and iron66's servers is protected by 256-bit SSL encryption — the same standard used by major Malaysian banks such as Maybank and CIMB. Your identification details, phone number, and payment information are never transmitted in unencrypted form.
Iron66 is fully compliant with Malaysia's Personal Data Protection Act 2010. This means we only collect data that is strictly necessary, retain it for a reasonable period, and give you full rights to access, correct, or request deletion of your data at any time.
Iron66 has never and will never sell, rent, or trade players' personal data to any third party for marketing or commercial purposes. Your data belongs to you. We only share information necessary for payment processing and legal compliance, and only with selected partners bound by strict confidentiality agreements.
Only iron66 staff who genuinely require access to user data to perform their duties are permitted to view such information. All access is logged and monitored. Player account passwords cannot be viewed by anyone — including our customer support team — as they are stored in an irreversible hashed format.
In the event of any security incident that may affect user data, iron66 is committed to notifying affected players within the timeframe prescribed by Malaysian law. We will also communicate the steps taken to contain the incident and prevent similar occurrences in the future.
You can access, update, or request deletion of your personal data at any time by contacting our support team. You can also manage your marketing communication preferences — opt out of promotional emails or notifications you no longer want, with no impact on your account.
This Privacy Policy is published by iron66 ("we", "platform", "iron66") and applies to all users who access or use the iron66 platform at iron66.best, including all services, games, features, and content made available therein.
We understand that your trust depends not only on game quality or payout speed, but also on the confidence that your personal information is in responsible hands. This Privacy Policy is written in plain language so that every Malaysian player can understand exactly how their data is managed — without confusing legal jargon.
By using the iron66 platform, you agree to the data collection and usage practices described in this document. This Privacy Policy forms part of the Terms & Conditions iron66 and should be read together with that document.
Legal Basis: The iron66 Privacy Policy is framed in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia governing the processing of personal data by commercial entities in Malaysia. We are committed to complying with all PDPA provisions and related laws in force from time to time.
Iron66 collects your personal data through various means — directly when you register or complete a form, automatically when you use the platform, and in some cases through third parties such as payment providers. The categories of data we collect are as follows:
Registration & Identity Data:
Financial and Transaction Data:
Usage and Technical Data (collected automatically):
Minimum Collection Principle: iron66 only collects data that is strictly necessary for the stated purposes. We do not collect excessive or irrelevant data beyond what is required to operate the platform.
Iron66 uses the personal data collected for the following purposes, all of which are lawful under PDPA 2010:
We will not use your data for any other purpose without first obtaining your fresh consent.
Iron66 does not sell, rent, or trade your personal data to third parties. However, in the course of normal platform operations, there are situations where limited and controlled data sharing is necessary:
Payment Processing Partners: Required transaction information is shared with legitimate Malaysian payment service providers such as FPX payment gateways and digital wallet providers to facilitate secure processing of deposits and withdrawals.
Platform Service Providers: In certain cases, third-party technical service providers that assist us in operating the platform — such as cloud hosting and analytics services — may have limited access to data necessary for their specific tasks. All such providers are bound by strict data protection agreements.
Authorities and Legal Requirements: iron66 may be required to disclose user data to law enforcement agencies, regulators, or courts when mandated by Malaysian law or a valid court order.
Fraud Prevention: In cases involving suspected fraud or illegal activity, relevant information may be shared with the relevant financial institutions or enforcement agencies.
Our Commitment: In all instances of data sharing, we disclose only the minimum information necessary and ensure that recipients are bound by confidentiality and data protection obligations equivalent to iron66's own standards.
We continually invest in our security infrastructure to ensure your personal data remains protected at all times. The technical and organisational measures we have implemented include:
While we take every reasonable precaution, no system can be guaranteed to be 100% secure. You also play an important role in protecting your own data — keep your password confidential and never share your login credentials with anyone.
Iron66 uses cookies and similar tracking technologies to enhance the user experience and analyze platform usage patterns. Cookies are small text files stored in your web browser when you visit our platform.
Types of cookies we use:
You can manage or delete cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the iron66 platform. Continued use of the iron66 platform after reading this notice is considered consent to our use of cookies.
As an iron66 user residing in Malaysia, you have the following rights under PDPA 2010 with respect to your personal data:
You have the right to request a copy of the personal data iron66 holds about you at any time.
You have the right to request correction of any inaccurate or incomplete personal data held in our records.
You may request the deletion of your personal data, subject to applicable legal retention requirements.
You may object to the processing of your data for direct marketing purposes at any time with no consequences.
You have the right to receive your personal data in a structured, machine-readable format for transfer purposes.
In certain circumstances, you may request that we restrict the processing of your data while a dispute is being resolved.
To exercise any of the above rights, contact the iron66 customer support team via live chat or email at support@iron66.best. Requests will be processed within 21 business days from the date of receipt. In complex cases, this period may be extended by up to 60 days with notice provided to you.
Note: Certain rights may be limited in situations where iron66 has a legal obligation to retain data, such as financial record-keeping and anti-money laundering compliance requirements.
The iron66 platform is intended for individuals aged Aged 18 and above only. We do not knowingly collect personal data from individuals under the age of 18. The iron66 registration process requires age verification and we take reasonable precautions to prevent underage registration.
Should we discover or be notified that personal data belonging to a minor has been collected without our knowledge, we will:
To Parents and Guardians: Please ensure that any devices used in your household have appropriate parental controls in place to prevent minors from accessing online gambling platforms. If you suspect that an iron66 account has been opened by someone underage, contact us immediately at support@iron66.best.
In the course of platform operations, certain user data may be stored or processed on servers located outside Malaysia, particularly by the cloud and technology service providers we use. When such data transfers occur, iron66 ensures:
Iron66 does not transfer user data to countries lacking an adequate data protection framework without first putting appropriate additional safeguards in place.
Iron66 retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by law. General guidelines for our retention periods:
| Data Type | Retention Period | Reason |
|---|---|---|
| Active Account Data | For as long as the account is active | Service operations |
| Financial Transaction Records | Minimum 7 years | Financial and legal requirements |
| KYC Documents | 5 years after account closure | AML Compliance |
| Communication Logs | 2 years | Dispute resolution |
| Technical Data & Logs | 90 days | Security & debugging |
| Marketing Data | Until you withdraw consent | Marketing communications |
Once the retention period expires, data is securely deleted or anonymized in accordance with established procedures.
Iron66 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements in how we protect your data. When material changes are made, we will:
We encourage you to review this page periodically. Continued use of the iron66 platform after any changes take effect constitutes your acceptance of the updated Privacy Policy. If you disagree with any changes, you have the right to close your account and request deletion of your data.
If you have any questions, concerns, or complaints regarding this Privacy Policy or how iron66 handles your personal data, we welcome you to reach out through the following channels:
Our team will respond within 3–5 business days for general privacy enquiries. Formal user rights requests (access, correction, deletion) will be processed within 21 business days.
If you feel that your complaint has not been resolved to your satisfaction by iron66, you have the right to refer your complaint to Department of Personal Data Protection (JPDP) Malaysia or the relevant authorities.
Our Final Commitment: For iron66, privacy is not merely a legal obligation — it is a core value we hold firmly. Every decision involving user data is carefully weighed against your privacy interests. Your trust is our most valuable asset, and we will never take that responsibility lightly.
For many Malaysian players, data privacy may seem like a technical matter with little bearing on their day-to-day gaming experience. In reality, how a platform handles your data reflects how much it values your trust as a user. Platforms that are not serious about privacy are typically not serious about fair play, payment reliability, or the long-term interests of their players either.
At iron66, we understand that when you register, you are entrusting us with something highly sensitive — your full name, Malaysian identification number, phone number, and payment details such as your Touch 'n Go eWallet or DuitNow account. This is not information to be taken lightly. We safeguard it with the same level of responsibility that a bank applies to its customers' financial information.
Malaysia's PDPA 2010 provides a vital legal framework for data protection in the country. Many people are unaware that this law grants them real, enforceable rights — the right to know what data is held about them, the right to correct inaccurate information, and in certain circumstances, the right to request deletion of their data. iron66 respects these rights not merely because the law requires it, but because we believe it is simply the right way to do business.
One of the clearest decisions reflecting our privacy values is our commitment to not selling user data to third parties. In today's digital landscape, user data is a highly valuable commodity. Many online businesses — not just within the gaming industry — generate additional revenue by trading user data to advertising and marketing companies. iron66 does not, and will never, take that path. Our revenue comes from our gaming platform, not from selling our players' information.
If you're new to online casino gaming and have concerns about the safety of your personal information, we want to put your mind at ease. iron66 has made significant investments in its security and privacy infrastructure. The 256-bit SSL encryption, two-factor authentication, 24/7 security monitoring, and this comprehensive privacy policy are not merely documents on paper — they are live systems operating around the clock to keep you protected. Should you have any further questions, our support team is always on hand to assist in Bahasa Malaysia via our platform's live chat.
Trust badges guaranteeing data protection for Malaysian players
Answers to the most frequently asked privacy questions from Malaysian players
Your data is protected by SSL 256-bit encryption. Full compliance with Malaysia's PDPA 2010. Over 500,000 Malaysian players trust iron66 for a safe and responsible gaming experience.
SSL 256-bit | PDPA 2010 Compliant | Data Not Sold | 24/7 BM Support