irokok Member Personal Data Protection

Privacy Policy irokok — Personal Data Protection for Malaysia Members

Your privacy is our priority. This Privacy Policy transparently explains how irokok collects, uses, stores, and protects your personal data — in line with international data protection standards and the needs of Malaysian users.

Last Updated: 1 January 2026
256-bit SSL
End-to-End Encryption
Secure Data
Not Sold
Not Shared
Without Consent
Full Rights
Your Data Controls
Quick Summary: irokok collects your personal data only for stated purposes, protects it with the latest encryption technology, and never sells or shares your information without your explicit consent. Your privacy is not merely a legal obligation for us — it is a core principle of how we operate.

Introduction & Scope of This Privacy Policy

This Privacy Policy ("Policy") is published by irokok and applies to all users who access or use the irokok platform via the website irokok.net, mobile app, or any other digital medium operated by irokok. This policy describes our privacy practices regarding the collection, processing, storage, and disclosure of your personal data.

Irokok is committed to handling your personal data responsibly and in accordance with sound data protection principles. We understand that your trust is our most valuable asset, and protecting your privacy is one of the key ways we uphold that trust.

By using the irokok platform, you agree to the collection and use of your information as described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the irokok platform and contact our customer support team for further assistance.

Personal Data We Collect

Irokok collects your personal data through several means — directly when you register or use the platform, automatically via tracking technologies as you browse our website, and from trusted third parties such as identity verification providers and payment processors.

Data Categories Type of Information How Collected
Identity Full name, date of birth, identification number (MyKad/passport), selfie verification photo Account registration & KYC process
Relationship Email address, phone number, username Account registration
Financial Bank account number, bank name, digital wallet number, deposit and withdrawal transaction history Payment activity
Technical IP address, device type, browser type, operating system, cookie data Automated system logs
Activity Game history, betting records, bonus usage, account activity logs Platform usage
Communications Live chat conversation records, support emails, feedback, and complaints Customer support interactions
Note: irokok does not collect sensitive categories of data such as health information, biometric data (except for specific KYC identity verification purposes), or religious belief information. The data we collect is limited to what is strictly necessary for platform operations.

How We Use Your Personal Data

Every piece of data we collect has a clear and lawful purpose. irokok does not process your personal data for any purpose not stated in this Privacy Policy without first obtaining your consent.

  • Account Management: To create, verify, and maintain your account on the irokok platform, including the KYC process required by platform compliance.
  • Transaction Processing: To securely and efficiently process deposits, withdrawals, and any other financial transactions you make on the platform.
  • Platform Security: To detect and prevent fraud, money laundering, unauthorized access, and any other illegal activity that may harm the platform or other members.
  • Customer Support: To respond to inquiries, resolve complaints, and provide effective technical support.
  • Marketing Communications: To send promotions, exclusive offers, and platform updates — only if you have given consent to receive such communications.
  • Platform Improvements: To analyze aggregated usage patterns in order to improve user experience, system performance, and game quality.
  • Legal Compliance: To fulfill applicable legal and regulatory obligations, including requests from competent authorities.

Irokok applies the principle of data minimisation — we only collect and process data that is strictly necessary for the stated purposes. Data that is no longer needed is deleted or anonymised in accordance with our retention schedule.

Data Sharing with Third Parties

Irokok never sells, rents, or trades your personal data to any third party for their own marketing or commercial purposes. This is our absolute commitment to all members.

However, in the course of operating the platform, irokok may share your data with the following limited and trusted categories of third parties:

  • Payment Processors: Partner banks, FPX providers, and digital wallet operators (Touch 'n Go eWallet, GrabPay, Boost) that process your transactions — data is shared only to the extent necessary to complete the transaction.
  • Identity Verification Providers: Trusted third-party KYC services used to verify your identity during registration or required security checks.
  • Technology Service Providers: Companies providing technical infrastructure, data hosting, and cybersecurity services — subject to strict confidentiality agreements.
  • Authorities: Law enforcement agencies or regulatory bodies when irokok is required to do so by law or a valid court order.
Data Sharing Guarantee: All third parties that receive your data from irokok are bound by strict data protection agreements and are required to use your data solely for permitted purposes. irokok conducts regular reviews of all third-party partners to ensure ongoing compliance.

Data Security Measures

Irokok continually invests in cutting-edge cybersecurity infrastructure to protect your personal data from unauthorized access, loss, destruction, or unauthorized disclosure. The technical and organizational measures we implement include:

  • 256-bit SSL Encryption: All communication between your device and irokok servers is secured with 256-bit SSL encryption, meeting the same security standard used by major financial institutions.
  • Stored Data Encryption: Sensitive data stored in irokok's databases — including financial information and identity documents — is encrypted using AES-256 encryption standards.
  • Strict Access Controls: Access to members' personal data is restricted to irokok staff who require it to perform authorised duties only, with full audit logs maintained.
  • Continuous Threat Monitoring: A 24/7 security monitoring system detects and responds to suspicious activity or intrusion attempts in real time.
  • Regular Security Testing: irokok conducts regular penetration testing and security audits by independent third parties to identify and address any vulnerabilities.
  • Data Backup: Member data is securely and regularly backed up to ensure resilience against system failures or unexpected incidents.
Security Incidents: In the event of any security incident that may affect your personal data, irokok is committed to informing you within a reasonable timeframe and taking immediate, effective remedial steps.

Cookies & Tracking Technologies

Irokok uses cookies and similar tracking technologies to enhance your experience on the platform, understand usage patterns, and ensure the security of your login session. Cookies are small text files stored on your device by your web browser.

  • Essential Cookies: Required for core platform operations such as maintaining your login session, remembering language preferences, and ensuring account security. These cookies cannot be disabled without affecting platform functionality.
  • Performance Cookies: Collecting information about how you use the platform — pages visited, time spent, and links clicked — to help us improve platform performance and design.
  • Functional Cookies: Remembering your preferences and settings, such as display options and preferred language, to deliver a more personalised experience.
  • Analytics Cookies: Used to analyse platform traffic and usage in aggregate, anonymised form for the purpose of continuous improvement.

You can manage or disable cookies through your web browser settings at any time. Please note, however, that disabling certain cookies may affect the functionality and your experience on the irokok platform.

Data Retention and Deletion Period

Irokok only retains your personal data for as long as it is needed for the purposes for which it was collected, or as required by applicable laws and regulations. Retention periods vary by data type:

  • Active Account Data: Retained for the duration your account is active and for the required period after account closure for compliance purposes and resolution of any outstanding claims.
  • Financial Transaction Records: Retained for a minimum of 7 years from the transaction date in accordance with financial reporting and anti-money laundering legal requirements.
  • KYC Documents: Retained for 5 years after account closure or the period specified by the relevant regulatory authority.
  • Communication Logs: Customer support conversation records are retained for 2 years for quality control and complaint resolution purposes.
  • Cookie & Technical Log Data: Typically retained for between 30 days and 12 months, depending on the type of cookie and operational requirements.

When data is no longer needed and there is no legal obligation to retain it, irokok will securely delete or anonymise it using methods that ensure it cannot be recovered.

Your Rights as a User

As an irokok member, you have the following rights regarding your personal data. irokok is committed to facilitating these rights promptly and at no charge:

Right of Access

You have the right to request a copy of the personal data irokok holds about you. We will provide this information in a readable format within 30 days of your request.

Right to Rectification

If the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You can update certain information directly in your account settings.

Right to Erasure

In certain circumstances, you have the right to request that irokok delete your personal data. This right is subject to irokok's legal obligations to retain certain data for compliance purposes.

Right to Object

You may object to the processing of your personal data for direct marketing purposes at any time, and irokok will honour that request immediately.

Right to Data Portability

You have the right to receive the personal data you have provided to irokok in a structured, machine-readable format, and to transfer it to another data controller if desired.

To exercise any of the above rights, please contact the irokok customer support team via the in-platform live chat. irokok will respond to your request within 30 business days.

Child Data Protection

The irokok platform is strictly for individuals aged 18 and above. irokok does not knowingly collect personal data from individuals under the age of 18. If irokok discovers that a minor's personal data has been collected without valid consent, we will take immediate steps to delete that data and close the account in question.

If you are a parent or guardian and discover that your underage child has registered for or used the irokok platform, please contact our customer support team immediately so that appropriate action can be taken without delay.

International Data Transfers

In the course of its operations, irokok may transfer your personal data to servers or processing facilities located outside Malaysia. Any such transfer is carried out with adequate safeguards to ensure your data remains protected to a standard equivalent to this Privacy Policy.

Safeguards we apply to international data transfers include legally binding data processing agreements, recognised standard contractual clauses, and verification that recipients maintain adequate data protections before any transfer is authorised.

Changes to This Privacy Policy

Irokok reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or platform improvements. Any changes will take effect immediately upon publication on this page, along with a clear update date.

For significant and material changes, irokok will endeavor to notify you via in-platform notifications or the email registered to your account. We encourage you to review this page periodically to stay informed of irokok's latest privacy practices.

Your continued use of the irokok platform after any changes take effect constitutes your acceptance of the updated Privacy Policy.

Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how irokok handles your personal data, irokok's Data Protection Officer (DPO) team is ready to assist you.

How to Contact the irokok Privacy Team:
Live Chat: Available 24/7 via the irokok platform Email: [email protected] Response Time: Within 3 business days for privacy enquiries

Irokok takes every privacy enquiry and complaint seriously. Each request is recorded, reviewed, and responded to diligently by our qualified team. Your satisfaction with the way we handle your personal data is our priority.

Why Your Privacy Is Safe with irokok

Data protection is not just a written policy — it is a daily practice we uphold at every moment.

Military-Grade Encryption

All data transmitted between your device and irokok servers is protected by 256-bit SSL encryption — the same technology used by leading banks worldwide. Your personal and financial information is never exposed in transit.

Your Data Is Never Sold

Irokok has never and will never sell, rent, or trade your personal data to advertisers, data brokers, or any third party for their commercial purposes. This is not merely a promise — it is a policy we enforce internally every day.

Full Control in Your Hands

Through your irokok account settings, you can update personal information, manage communication preferences, and request access to your data at any time. We give you real control — not just buttons that look good.

Secure & Verified KYC

Irokok's identity verification (KYC) process uses end-to-end encryption for all documents you submit. Your identification documents are processed in a secure environment accessible only to authorised personnel under full monitoring.

Regular Security Audits

Irokok undergoes regular cybersecurity and data privacy audits conducted by qualified independent third parties. This ensures our data protection systems remain at the highest and most current standard in response to evolving cyber threats.

Prompt Incident Notification

In the event of any security incident that may affect your data, irokok is committed to notifying you promptly and transparently. We do not conceal problems — we address them openly and responsibly to maintain your trust.

Privacy Guaranteed, Entertainment Without Worry

Ready to Play with Peace of Mind on a Platform That Protects Your Privacy?

With 256-bit SSL data protection, a transparent privacy policy, and our commitment to never selling your data, irokok is the online entertainment platform that truly puts the security and privacy of Malaysia members first.

Data not sold 256-bit SSL Encryption Full control in your hands
Bahasa Melayu