ironman66 is committed to protecting the privacy and personal data of every player on our platform. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you hold as a user — in clear, plain English.
Last updated: 1 January 2026Six ways ironman66 protects your personal information every single day.
All personal data transmitted between your browser and ironman66 servers is protected by TLS/SSL encryption. Data stored on our systems is encrypted at rest using industry-standard AES-256 protocols, preventing unauthorised access even in the event of a physical infrastructure breach.
ironman66 does not sell, rent, or trade your personal information to third-party marketing companies, data brokers, or advertising networks. Your data is used exclusively for the purposes described in this Privacy Policy, and for no other commercial purpose without your explicit consent.
You retain the right to access, correct, restrict, or request deletion of your personal data at any time. ironman66 provides straightforward processes for exercising these rights — simply contact our support team, and we will respond within the timeframes set out in this Policy.
ironman66 collects only the personal data that is strictly necessary for operating your account, processing transactions, and complying with applicable legal and regulatory obligations. We do not harvest data beyond what is needed for these defined purposes.
Personal data is retained only for as long as it is necessary for the purpose for which it was collected, or as required by law. Account data for active players is retained for the duration of the account relationship. Data for closed accounts is retained for the legally required minimum period before secure deletion.
In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, ironman66 maintains documented breach response procedures. Affected users will be notified promptly in accordance with applicable regulatory requirements, with clear guidance on protective actions to take.
ironman66 ("we", "us", "our", "the Platform") operates the online gambling and sports betting website accessible atironman66.cam (the "Website"). We are committed to protecting the privacy and personal data of all registered users, visitors, and prospective players who interact with our Platform.
This Privacy Policy (the "Policy") sets out how ironman66 collects, uses, stores, shares, and protects personal data in connection with your use of the Website and the services offered therein — including casino games, live dealer products, sports betting markets, and all associated account and payment functions.
This Policy applies to all personal data processed by ironman66, regardless of whether it is collected through the Website, through mobile access, through live chat or email correspondence with our support team, or through any other channel by which you interact with ironman66.
By registering an account, accessing the Website, or otherwise using ironman66's services, you acknowledge that you have read and understood this Policy and agree to the collection and use of your personal data as described herein. If you do not agree, you must cease using the Platform and may request account closure in accordance with ourTerms & Conditions.
This Policy was last revised on 1 January 2026. We recommend checking this page periodically. Material changes will be communicated via email or in-platform notification where reasonably practicable.
The following terms carry the meanings defined below throughout this Privacy Policy:
| Term | Meaning |
|---|---|
| Personal Data | Any information relating to an identified or identifiable natural person. This includes names, identification numbers, contact details, location data, IP addresses, and online identifiers. |
| Processing | Any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, or deletion. |
| Data Subject | The identifiable natural person to whom the personal data relates — in the context of this Policy, primarily the registered player or Website visitor. |
| Controller | ironman66, as the entity that determines the purposes and means of processing personal data collected through the Platform. |
| Processor | A third-party service provider that processes personal data on behalf of ironman66, pursuant to a written data processing agreement. |
| Consent | A freely given, specific, informed, and unambiguous indication of agreement by the Data Subject to the processing of their personal data for a stated purpose. |
| KYC Data | Identity and address verification documents submitted by a player as part of the Know Your Customer process, including government-issued ID and proof of address. |
ironman66 collects personal data in several categories, depending on how you interact with the Platform. We set out below the categories of data we collect and specific examples within each:
ironman66 collects personal data through the following channels and mechanisms:
ironman66 does not purchase personal data from third-party data brokers or consumer profiling companies for the purpose of marketing or player acquisition.
ironman66 processes your personal data one or more of the following legal bases, depending on the specific processing activity:
| Legal Basis | When It Applies |
|---|---|
| Contractual necessity | Processing required to register your account, process deposits and withdrawals, and provide the gaming services you have requested under our Terms & Conditions. |
| Legal obligation | KYC verification, AML checks, age verification, and regulatory reporting obligations required by applicable law. |
| Legitimate interests | Fraud prevention, platform security, abuse detection, and analytical processing to improve the Platform — where such interests are not overridden by your rights. |
| Consent | Marketing communications by email or SMS, optional analytics cookies, and any other processing where we have explicitly requested and received your consent. You may withdraw consent at any time. |
| Vital interests | Where processing is necessary to protect the vital interests of the data subject or another person — for example, disclosures related to responsible gambling interventions. |
ironman66 uses collected personal data for the following purposes:
To create, maintain, and manage your player account; to authenticate your identity at login; to respond to account-related queries; and to apply and enforce account security measures such as two-factor authentication.
To process deposits via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and USDT TRC20; to process withdrawal requests; and to maintain accurate transaction records in compliance with applicable financial regulations.
To conduct KYC identity verification and age verification; to perform AML screening; to comply with applicable reporting obligations; and to cooperate with regulatory or law enforcement enquiries as required by law.
To respond to your enquiries, complaints, and feedback submitted via live chat, email, or WhatsApp; to maintain records of support interactions for quality assurance and dispute resolution; and to provide support in English, Bahasa Melayu, and Mandarin to players across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, and Petaling Jaya.
To detect, investigate, and prevent fraudulent transactions, account takeovers, bonus abuse, and other prohibited activities; to enforce our Terms & Conditions; and to protect the integrity of the Platform for all users.
Where you have provided explicit consent, to send you promotional emails, SMS notifications, or in-platform messages about bonus offers, loyalty programme updates, new game launches, and other relevant promotions. You may unsubscribe from marketing communications at any time by contacting support or using the unsubscribe link in any marketing email.
To analyse aggregate usage data to understand how players interact with the Platform; to identify technical issues; to improve game recommendations; and to develop new features and products. Where possible, data used for analytics is aggregated or anonymised so that individual players are not identifiable.
ironman66 does not sell your personal data. We may share your data with the following categories of recipient only where strictly necessary and subject to appropriate safeguards:
ironman66 will never share your personal data with third-party marketers, advertising networks, or social media companies for commercial purposes without your explicit prior consent.
ironman66 uses cookies and similar tracking technologies to operate and improve the Website. A cookie is a small text file placed on your device by the Website when you visit. The following categories of cookies are used:
These cookies are essential for the Website to function correctly. They enable core functionality such as maintaining your logged-in session, storing your shopping cart during a deposit flow, and remembering security-related preferences. You cannot opt out of strictly necessary cookies without affecting your ability to use the Platform.
These cookies remember your preferences and settings — such as your chosen language (English, Bahasa Melayu, or Mandarin), preferred currency display (MYR/RM), and game category filters — to personalise your experience on return visits.
With your consent, ironman66 uses analytical cookies to collect aggregate data about how players navigate the Website — including which pages are visited most frequently, how long sessions last, and where users drop off during the deposit process. This data is used solely to improve Platform performance and user experience.
You may control cookie settings through your browser's privacy settings. Most modern browsers allow you to block or delete cookies, though disabling strictly necessary cookies will impair Platform functionality. You may also withdraw consent for analytical cookies at any time by contacting ironman66 support.
ironman66 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, subject to applicable legal retention obligations. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of account + minimum 5 years after closure |
| KYC identity documents | Minimum 5 years from last transaction or account closure |
| Transaction records | Minimum 5 years from the date of transaction |
| Customer support records | 3 years from the date of the interaction |
| Marketing consent records | Duration of consent +2 years for audit purposes |
| Technical/log data | Up to 12 months from collection |
| Analytical cookie data | Up to 13 months from collection (industry standard) |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.
ironman66 operates globally and may store or process your personal data on servers located outside of Malaysia. Where personal data is transferred to a country that does not provide an equivalent level of data protection, ironman66 will implement appropriate safeguards to ensure your data remains protected, including:
By using the ironman66 Platform, you acknowledge that your personal data may be transferred to, stored, and processed in jurisdictions outside of Malaysia as described in this section.
As a Data Subject, you have the following rights in respect of your personal data held by ironman66. You may exercise any of these rights by contacting our support team as described in Section 16:
Request a copy of the personal data ironman66 holds about you, along with information about how it is used and who it is shared with.
Request correction of inaccurate or incomplete personal data held by ironman66 about you.
Request deletion of your personal data in certain circumstances, subject to ironman66's legal retention obligations.
Request that ironman66 restrict the processing of your personal data in specific circumstances, for example while a dispute is being investigated.
Request a structured, machine-readable copy of personal data you have provided to ironman66, where processing is based on consent or contract.
Object to the processing of your personal data for direct marketing purposes or where processing is based on ironman66's legitimate interests.
Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
Request human review of any decision made solely by automated means that significantly affects you, such as account suspension triggered by automated fraud detection.
ironman66 will respond to all verified rights requests within 30 days of receipt. In complex cases, we may extend this period by a further30 days and will notify you accordingly.
We may need to verify your identity before processing a rights request to ensure we are disclosing or acting on data belonging to you, and not third party making an impersonation attempt.
ironman66's Platform is strictly intended for adults aged21 years and above. We do not knowingly collect personal data from persons under the age of 21. Registration requires confirmation that the user meets the minimum age requirement, and KYC verification is used to enforce this restriction.
If ironman66 becomes aware that personal data has been collected from a person under the minimum age threshold, that account will be immediately suspended, all associated data will be deleted to the extent legally permissible, and any balance will be returned subject to verification of the deposit source.
If you believe that a minor may have registered an account on ironman66, please contact us immediately at [email protected] so that we may investigate and take appropriate action.
The ironman66 Website may contain references or links to third-party websites or services. This Privacy Policy applies solely to personal data processed by ironman66 in connection with the Website and Platform services. ironman66 has no control over the privacy practices of third-party websites and accepts no responsibility or liability for their content or data handling practices.
We encourage you to review the privacy policies of any third-party websites you access — including the websites of payment providers such as Touch 'n Go eWallet, Boost, GrabPay, or your bank's online banking portal — before submitting personal data to those services.
ironman66 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:
No transmission of data over the internet can be guaranteed as100% secure. While ironman66 takes all reasonable precautions, you transmit personal data to the Platform at your own risk. Please ensure your own device is secure and that you do not share your login credentials with anyone.
ironman66 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or Platform features. When we make material changes to this Policy, we will:
Your continued use of the ironman66 Platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised terms. We recommend reviewing this Policy at least once every three months.
If you have any questions, concerns, or requests in relation to this Privacy Policy or the way ironman66 handles your personal data, please contact us through any of the following channels:
When submitting a data subject rights request, please include your full name, the email address registered to your account, a clear description of your request, and a copy of your identity document for verification purposes.
If you are not satisfied with ironman66's response to a privacy complaint, you may escalate the matter to the relevant data protection authority in your jurisdiction or seek independent legal advice.
ironman66 will never ask for your account password, full payment card number, or banking login credentials by email, live chat, or any other channel. If you receive such a request purporting to be from ironman66, please report it to our security team immediately at [email protected].
Now that you understand how we protect your data, join thousands of Malaysian players enjoying a secure, fair, and fully localised gaming experience at ironman66.
For players aged 21 and above only. Play responsibly.