Your privacy is not merely a legal obligation for irokok — it is part of our promise to every player. This document transparently explains how we collect, use, store, and protect your personal information at all times.
Six key approaches we use to ensure your personal data remains safe and protected at all times.
All data transmitted between your device and irokok servers is protected by 256-bit SSL encryption — the same security standard used by leading banking institutions worldwide.
Your personal data is stored on servers protected by multiple layers of physical and digital security. Access to this data is restricted solely to staff who require it to perform their duties.
Irokok does not sell, rent, or share your personal information with third parties for marketing purposes. Your data is used solely for platform operations and the improvement of our services.
Our KYC identity verification process is handled through a fully encrypted system. Documents you submit are stored with full protection and accessed only by authorised verification personnel.
You have the full right to access, correct, and request deletion of your personal data that we hold. Your requests will be processed within the stipulated timeframe without unnecessary questioning.
Irokok fully complies with Malaysia's Personal Data Protection Act (PDPA) 2010. All our data handling practices are reviewed regularly to ensure ongoing compliance with applicable legal requirements.
To provide a safe and quality service, irokok collects various types of personal information from our members. This information is divided into two main categories:
Information You Provide Directly:
Automatically Collected Information:
Irokok collects your personal information through several established primary channels:
The following table clearly outlines the primary purposes for which irokok uses your personal data:
| Purpose of Use | Type of Data Used | Legal Basis |
|---|---|---|
| Account management and identity verification | Name, IC, date of birth, email | Contract fulfilment |
| Financial transaction processing | Bank details, e-wallet, transaction records | Contract fulfilment |
| KYC verification and fraud prevention | Identity documents, IP address, login records | Legal obligation |
| Sending platform notices and promotions | Email, phone number | Legitimate interest / consent |
| Quality improvement and user experience | Usage data, activity records, device logs | Legitimate interest |
| Regulatory requirements compliance | All related data | Legal obligation |
Irokok does not sell your personal information to any third party. However, there are certain situations where we need to share your information with trusted parties for platform operational purposes:
All third parties that receive data from irokok are bound by strict data protection agreements and are not permitted to use that data for any purpose beyond what has been specified.
Irokok implements multiple layers of technical and organisational security to protect your personal data from unauthorised access, disclosure, alteration, or destruction:
Irokok retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable law.
When data is no longer needed and there is no legal obligation to retain it, irokok will delete or anonymize that data using secure, irreversible methods.
The irokok platform uses cookies and similar technologies to enhance your user experience, secure your login session, and understand overall platform usage patterns.
Types of cookies used by irokok:
You can manage your cookie settings through your browser at any time. However, disabling certain cookies may affect the functionality and user experience of the irokok platform.
As a data subject under Malaysia's PDPA and applicable data protection laws, you have the following rights regarding the personal data we hold:
You have the right to request a copy of the personal data we hold about you at any time.
If your data is inaccurate or outdated, you have the right to request immediate correction.
Under certain circumstances, you have the right to request the deletion of your personal data from our systems.
You may request that we restrict the processing of your data under certain circumstances as defined by law.
You have the right to object to the processing of your data for specific purposes, including direct marketing.
You may request your data in a structured, machine-readable format for transfer to another platform.
To exercise any of the above rights, please contact the irokok support team via live chat or email. Your request will be processed within 30 business days of receipt.
In the course of platform operations, your personal data may be transferred and processed outside Malaysia — for example, for cloud server storage or game processing by international providers.
When cross-border data transfers occur, irokok ensures that:
The irokok platform is exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data of anyone under 18 years of age.
Should irokok discover that personal data of a minor has been collected without valid parental or guardian consent, we will take immediate action to delete that data and close the associated account.
Parents or guardians who discover that their child has registered on the irokok platform without consent are encouraged to contact our support team immediately via live chat or email at [email protected].
Irokok reserves the right to update this Privacy Policy from time to time to reflect changes in our data handling practices, legal requirements, or relevant technological developments.
When significant changes are made to this Privacy Policy, irokok will:
Continued use of the platform after any amendments are published constitutes acceptance of the updated policy. If you disagree with any changes, please stop using the platform and contact us to close your account.
If you have any questions, concerns, or complaints regarding how irokok handles your personal data, we strongly encourage you to contact us directly:
All privacy complaints will be investigated thoroughly and responded to within 14 business days. If you are unsatisfied with our response, you have the right to file a complaint with Malaysia's Personal Data Protection Department.