Important Note: This Privacy Policy describes the privacy practices of the irokok platform. By using our platform, you agree to the collection and use of information as described herein. Please read this document carefully before using irokok's services.

1 Information We Collect

Irokok collects your personal information when you register an account, make financial transactions, contact the support team, or use any feature within our platform. Below are the categories of information we collect:

Personal Identification Information

During registration, we request your full name, date of birth, identity card number (MyKad) or passport number, email address, mobile phone number, and residential address. This information is required to verify your identity and confirm that you meet the platform's minimum age eligibility.

Financial Information

For the purpose of processing deposits and withdrawals, we collect bank account information, digital wallet account numbers (such as Touch 'n Go eWallet and GrabPay), and financial transaction records made through the platform. irokok does not store credit card information directly — all card processing is handled by trusted, registered payment providers.

Platform Usage Information

We automatically record technical data when you use the platform, including IP address, device and browser type, operating system, pages visited, session duration, and gaming activity patterns. This data is used solely to improve platform performance and detect suspicious activity.

KYC Documents

As part of the Know Your Customer (KYC) process, we collect copies of identity documents, proof of address, and proof of payment method ownership. All documents are stored in encrypted systems and are accessible only to authorised personnel.

We never collect information that is not needed. Every piece of data we collect has a clear purpose, stated explicitly in this Privacy Policy.

2 How We Use Your Data

Irokok uses your personal information for the following purposes, and no more:

  • Account Management: Creating, verifying, and managing your user account, including the secure login process.
  • Transaction Processing: Processing deposits, withdrawals, and any financial transactions you carry out through the platform.
  • Legal Compliance: Fulfilling legal obligations including KYC requirements, anti-money laundering (AML) compliance, and reporting to authorities when required.
  • Customer Support: Assisting you with inquiries, complaints, or technical issues encountered while using the platform.
  • Service Communications: Sending important notifications related to your account, transaction confirmations, security updates, and changes to the terms of service.
  • Platform Security: Detecting and preventing fraud, unauthorized access, account abuse, and any activity that violates the terms of use.
  • Service Improvement: Analyzing aggregated and anonymized usage patterns to improve platform performance, interface, and user experience.
  • Promotions (with consent): Sending promotional offers and relevant bonus information — only if you have opted in to receive marketing communications.

Your Choices: You may withdraw your consent to receive marketing communications at any time via your account settings or by contacting our support team. Withdrawing consent will not affect your access to irokok's core services.

3 Information Sharing

Irokok does not sell or rent your personal data to anyone. However, there are limited situations where we may need to share your information with certain parties:

Trusted Service Providers

We work with third-party service providers that help us operate the platform, including payment processing providers, secure cloud services, and licensed gaming software providers. All these partners are required to comply with privacy standards equal to or stricter than those practised by irokok.

Legal Requirements

Irokok may be required to disclose user information to government authorities, regulatory bodies, or law enforcement agencies when legally obligated to do so under applicable Malaysian law, including in cases involving financial crime investigations or money laundering.

Rights & Safety Protection

In situations where it is necessary to protect the rights, property, or safety of irokok, its users, or the public, we reserve the right to share relevant information with the appropriate parties as permitted or required by law.

4 Data Security

The security of user data is irokok's highest priority. We implement multiple layers of technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

  • 256-bit SSL Encryption for all data transmissions between your browser and irokok's servers.
  • At-rest data encryption for all records stored within our databases.
  • Two-Factor Authentication (2FA) available to all user accounts as an added layer of security.
  • 24/7 Security Monitoring by automated threat detection systems and a dedicated security team.
  • Regular security audits by independent cybersecurity firms to identify and remediate any vulnerabilities.
  • Strict Access Control ensuring that only authorised personnel can access user data, and only to the extent necessary for their role.

While we apply industry-best security measures, no system can guarantee 100% absolute security. We encourage users to also take precautions such as using strong passwords and not sharing login credentials.

5 Cookies & Tracking Technologies

The irokok platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions smoothly. Below are the types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled.
  • Performance Cookies: Collecting anonymized data on how users interact with the platform to help us improve performance and user experience.
  • Functional Cookies: Remembering your preferences such as language and display settings to make your experience on the platform more convenient.

You can control and manage cookies through your web browser settings. However, disabling certain cookies may affect the functionality and user experience of the irokok platform.

6 Data Storage & Transfer

Your personal information is stored on secure servers protected with full encryption. Data retention periods depend on the type of information and applicable legal requirements:

  • Active account data is retained for the duration of your membership and up to 7 years after account closure for legal compliance purposes.
  • Financial transaction records are retained for a minimum of 6 years in accordance with Malaysian financial regulatory requirements.
  • Customer support communication logs are retained for 3 years for reference and dispute resolution purposes.
  • Session data and technical logs are retained for 90 days before being automatically deleted.

All user data is stored in data centres located within zones that comply with international security standards. Any cross-border data transfers are carried out with adequate safeguards in accordance with PDPA requirements.

7 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data that we hold:

Your Rights Description Response Time
Right of Access Requesting a copy of the personal data we hold about you 14 working days
Right to Rectification Correcting inaccurate or incomplete information 7 working days
Right to Erasure Requesting deletion of personal data subject to legal obligations 21 working days
Right to Restriction Requesting restriction of your data processing in certain circumstances 14 working days
Right to Withdraw Consent Withdrawing consent for consent-based data processing Instantly
Right to Complain Filing a complaint with the Malaysia Department of Personal Data Protection –

To exercise any of the above rights, contact the irokok privacy team by email at [email protected], clearly stating the right you wish to exercise along with sufficient identification information for us to verify your identity.

8 Children's Privacy

The irokok platform is strictly for individuals aged 21 and above. We do not knowingly collect or process personal information from minors. Should we discover that data has been collected from an underage individual, such data will be deleted immediately and the associated account will be terminated.

Parents & Guardians: If you find that your child has registered an account on irokok, please contact us immediately at [email protected]. We will take prompt action to delete the account and all associated data.

9 Third-Party Links

The irokok platform may contain links to third-party websites such as payment providers or related service sites. This Privacy Policy applies solely to the irokok platform and does not cover the privacy practices of those third-party websites.

We recommend reading the privacy policy of every third-party website you visit. irokok is not responsible for the content, privacy policies, or security practices of websites outside our control.

10 Changes to the Privacy Policy

Irokok reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Whenever we make material changes, we will:

  • Updating the "Last Updated" date at the top of this page.
  • Sending notifications via registered email to all active members.
  • Displaying a prominent notice within the platform for a minimum period of 14 days.

Continued use of the irokok platform after amendments take effect constitutes acceptance of the updated terms. If you disagree with any changes, you are advised to discontinue use of the platform and contact us to close your account.

11 Contact Us

If you have any questions, concerns, or wish to exercise your privacy rights, the irokok team is ready to assist through the following channels:

  • Privacy Email: [email protected] — response within 24 hours on business days.
  • Live Chat: Available 24/7 via the live chat icon within the platform.
  • FAQ: Visit FAQ page us for an immediate response.

For enquiries relating to personal data rights, please include "Privacy Request" in your email subject line to expedite processing. Our privacy team will verify your identity before processing any data-related requests.