Privacy Policy ironman99 — Your Personal Data Protection

This Privacy Policy describes how ironman99 collects, uses, discloses and protects your personal information when you use our platform. We are committed to safeguarding your privacy and ensuring all personal data you share with us is handled responsibly and in line with industry best practices.

By registering an account or continuing to use the ironman99 platform, you consent to the collection and use of your personal data as described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact us for more information about available options.

This Privacy Policy covers all ironman99 services including the website, game lobby, live casino, sports platform and all other features within the ironman99 ecosystem.

Ironman99 collects the personal data necessary to provide services, ensure platform security and comply with legal obligations. The following are the categories of data we collect:

Ironman99 collects your personal data through several different channels depending on the type of information required:

• Account Registration: When you fill in the ironman99 registration form, basic information such as your name, email, phone number and date of birth is collected directly.
• KYC Process: Identity verification documents you upload during the KYC process — including copies of your MyKad or passport and proof of address — are collected through fully encrypted channels.
• Financial Transactions: Deposit and withdrawal details are recorded automatically when you carry out transactions through ironman99's supported payment methods.
• Platform Usage: Activity data such as games played, play duration and total wagering amounts are recorded automatically by the ironman99 platform system.
• Support Communications: When you contact ironman99's customer support team, the content of that communication is stored for record-keeping and service improvement purposes.
• Cookies and Tracking Technologies: Technical information such as IP addresses and usage patterns is collected via browser cookies and related tracking technologies.

Ironman99 uses your personal data solely for purposes related to providing platform services, legal compliance and improving the user experience. The primary purposes are as follows:

• Account Management: Creates, verifies, and manages your ironman99 account, including the login process, 2FA verification, and profile maintenance.
• Transaction Processing: Processes deposits, withdrawals, and all financial transactions associated with your account in Malaysian Ringgit.
• Platform Security: Detects and prevents fraud, multi-account usage, money laundering, and other suspicious activities that could compromise platform security and other users.
• KYC/AML Compliance: Fulfills compliance obligations including identity verification, background checks, and transaction reporting as required by applicable laws.
• Customer Support: Provides effective technical support and customer service based on your account information and communication history.
• Platform Communications: Sends important notifications related to your account, transactions, active promotions, and policy updates — only when you have agreed to receive them.
• Service Improvements: Analyzes anonymized usage data to improve overall platform quality, speed, and user experience.

Ironman99 does not sell, rent, or exchange your personal data to third parties for their own commercial purposes. However, there are certain situations where we need to share your data for operational and compliance purposes:

• Service Providers: Third parties that assist ironman99 in delivering its services — including payment providers such as DuitNow and FPX, licensed game providers, and technical infrastructure suppliers — may receive data necessary to carry out their functions. All such parties are bound by strict confidentiality agreements.
• Legal Compliance: ironman99 may disclose data to authorities, regulatory bodies or law enforcement agencies when required to do so by law or a valid court order.
• Security Protection: In cases of suspected fraud or serious security threats, ironman99 may share necessary information with relevant agencies to protect the interests of users and the platform.
• Business Transfers: In the event of any merger, acquisition or asset transfer, user data may be transferred to the new entity — which will be subject to an equivalent or stricter Privacy Policy.

Ironman99 invests seriously in data security infrastructure. Data protection is not merely a legal obligation for us — it is part of the identity and core values of the ironman99 platform.

• 256-bit SSL Encryption: All data communications between users and ironman99's servers are encrypted using the latest TLS/SSL protocols with 256-bit encryption strength — the same standard as online banking systems.
• Internal Access Controls: Access to user personal data within ironman99's internal systems is restricted to staff with a legitimate business need. All access is logged and audited regularly.
• Password Storage: ironman99 user passwords are never stored in plain text. They are processed using a secure cryptographic hashing algorithm before being saved.
• Threat Monitoring: ironman99's security systems continuously monitor platform activity to detect intrusion attempts, DDoS attacks and suspicious anomalies.
• Security Audit: Security assessments by independent third-party auditors are conducted periodically to identify and address any vulnerabilities before they can be exploited.
• Data Backup: User data is backed up regularly to secure locations to ensure service continuity in the event of system failure or disaster.

Ironman99 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable laws and regulations.

• Active Account Data: For as long as your account is active on ironman99, all related personal data will be retained to ensure continuous and complete service.
• After Account Closure: When an account is closed, ironman99 retains essential records for the minimum period required by applicable financial compliance and anti-money laundering regulations.
• Transaction Records: Financial transaction records are retained for the period required by financial reporting and audit obligations — typically no less than 5 years from the transaction date.
• Communication Data: Customer support records are retained for a reasonable period for reference and service improvement purposes, then deleted or anonymised.

Once the defined retention period has expired, your personal data will be securely deleted or anonymised so that it can no longer be linked to your identity.

As an ironman99 user, you have certain rights regarding your personal data. ironman99 is committed to respecting and facilitating the exercise of these rights:

Ironman99 uses cookies and related tracking technologies to enhance platform functionality, ensure security and understand how users interact with our platform. The following are the types of cookies used:

• Essential Cookies: Required for basic platform operations — including login authentication, security sessions and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collects information on how users interact with the platform — including pages visited and time spent — to help ironman99 improve performance and user experience.
• Functional Cookies: Saves user preferences such as language, display settings, and game preferences to deliver a more personalized experience.
• Security Cookies: Helps detect suspicious activity, unauthorized login attempts, and other security threats to protect your account.

You can manage your cookie settings through your web browser. However, disabling certain cookies may affect the functionality of the ironman99 platform. Session cookies are automatically deleted when you close your browser.

The ironman99 platform is not intended for individuals under the age of 18. ironman99 does not knowingly collect or process personal data of children below this age limit.

Every account registration request goes through a strict age verification process. Should ironman99 find that personal data of an individual under 18 has been collected unintentionally, we will take immediate steps to delete that data and close the associated account.

Ironman99 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements or platform service expansion. Any amendments will be posted on this page with an updated date.

For significant amendments that affect how we use your data, we will endeavour to notify you via in-platform notifications or email to your registered address. However, it remains your responsibility to review this Privacy Policy periodically to stay informed of our latest practices.

• Effective Date: Amendments take effect immediately upon publication unless stated otherwise.
• Continued Use: Continued use of the ironman99 platform after amendments are published is considered acceptance of the updated Privacy Policy.
• Previous Versions: Previous versions of the Privacy Policy are available upon request through ironman99's customer support channels.

If you have any questions, concerns or requests regarding ironman99's Privacy Policy or how we handle your personal data, please contact our support team through the following channels:

• Live Chat: The fastest way to get a response — 24/7 live chat is available directly within the ironman99 platform after login. Average response time is under 2 minutes.
• Support Email: For more detailed written enquiries, you may email the ironman99 support team. Responses are provided within 1–2 business days.
• Privacy Rights Request: To exercise any of your privacy rights such as data access, correction or deletion, include your account number and the type of request in your communication to expedite processing.