Privacy Policy

This Privacy Policy (the "Policy") describes how ikon777 (referred to herein as "ikon777", "we", "us", or "our"), operator of the online gaming platform accessible at https://ikon777.cam (the "Platform"), collects, processes, stores, and protects the personal data of individuals who access or use the Platform (each a "Player", "User", or "you").

ikon777 is committed to handling your personal data responsibly, transparently, and in full compliance with applicable data protection legislation, including Malaysia's Personal Data Protection Act 2010 (PDPA 2010) and any successor or supplementary legislation in force from time to time.

By registering an Account, accessing the Platform, or otherwise providing personal data to ikon777, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data in the manner described herein.

For the purpose of this Policy, the following terms are defined as follows:

• "Personal Data" means any information that relates to an identified or identifiable natural person, as defined under Malaysia's PDPA 2010, including but not limited to name, identification number (MyKad), email address, telephone number, IP address, and payment details.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, alteration, and deletion.
• "Data Controller" means ikon777, the entity that determines the purposes and means by which your Personal Data is processed.
• "Data Processor" means any third party engaged by ikon777 to process Personal Data on ikon777's behalf and under ikon777's instruction.
• "KYC" means Know Your Customer — the identity verification process required to comply with anti-money laundering (AML) obligations.
• "Cookies" means small text files placed on your device by the Platform to store session information, preferences, and usage analytics.
• "Special Category Data" means sensitive Personal Data that attracts heightened protection under applicable law, such as health data or biometric identifiers. ikon777 does not intentionally collect Special Category Data unless strictly required by regulatory obligations.

ikon777 collects Personal Data through several channels: directly from you when you register, deposit funds, or contact support; automatically through your interaction with the Platform; and from third-party service providers where permitted by law. The categories of data collected are set out below.

ikon777 uses your Personal Data for the following purposes:

• Account Management: To register and maintain your Account, verify your identity, process deposits and withdrawals, and administer your VIP tier status and loyalty reward points.
• KYC & AML Compliance: To verify that you meet our 21+ age requirement, confirm your identity, and comply with anti-money laundering obligations applicable to ikon777's operations.
• Payment Processing: To initiate, record, and reconcile deposit and withdrawal transactions via FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and other accepted Malaysian payment channels.
• Customer Support: To respond to your enquiries, resolve complaints, and provide technical assistance through live chat, email, and support tickets.
• Platform Improvement: To analyse usage data, identify platform errors, optimise game performance, and improve the overall player experience for Malaysian users.
• Responsible Gambling: To monitor gaming behaviour for indicators of problem gambling, enforce deposit limits and self-exclusion requests, and ensure compliance with our responsible gambling obligations.
• Fraud Prevention & Security: To detect suspicious login activity, identify multi-accounting, investigate fraudulent transactions, and protect the integrity of the Platform.
• Marketing Communications: To send promotional offers, bonus notifications, and personalised recommendations — but only where you have provided explicit opt-in consent. You may withdraw this consent at any time via your Account settings.
• Legal Obligations: To comply with applicable Malaysian law, respond to lawful requests from regulatory or law enforcement authorities, and enforce our Terms & Conditions.

ikon777 processes your Personal Data on one or more of the following legal grounds, as applicable to each processing activity:

• Contractual Necessity: Processing is necessary to perform the contract between you and ikon777 — i.e., to operate your Account, process transactions, and deliver the services you have requested.
• Legal Obligation: Processing is required to comply with applicable Malaysian law, including PDPA 2010, anti-money laundering legislation, and any lawful regulatory direction.
• Legitimate Interests: Processing is necessary for ikon777's legitimate business interests, including fraud prevention, Platform security, and business analytics — provided those interests are not overridden by your rights and interests.
• Consent: Where processing is based on consent — such as direct marketing communications — we will obtain your explicit consent before processing and you may withdraw that consent at any time without detriment to your Account.

ikon777 does not sell your Personal Data. We may share your data with the following categories of third parties, strictly on a need-to-know basis:

• Payment Processors: Certified intermediaries that facilitate FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency transactions. These processors operate under their own privacy policies and are bound by contractual data protection obligations with ikon777.
• KYC & Identity Verification Providers: Third-party services that assist with document verification, age confirmation, and identity authentication as required by our compliance programme.
• IT Infrastructure & Cloud Providers: Service providers that host Platform servers, databases, and backup systems. All such providers are bound by data processing agreements that meet applicable security standards.
• Fraud Detection Services: Providers of fraud monitoring, device fingerprinting, and risk scoring tools used to protect the integrity of the Platform and the security of Player accounts.
• Regulatory & Law Enforcement Authorities: Where ikon777 is required by applicable Malaysian law or a lawful direction from a competent authority to disclose Personal Data, we will comply with such requirements. Where legally permitted, we will notify you of any such disclosure.
• Professional Advisors: Lawyers, auditors, and compliance consultants who are bound by professional confidentiality obligations.

ikon777 uses cookies and similar tracking technologies (including web beacons and local storage objects) to operate the Platform efficiently and improve your experience. The categories of cookies we use are as follows:

You may control cookie settings through your browser preferences. Disabling strictly necessary or security cookies may prevent you from accessing your Account or using certain Platform features. ikon777 does not use cookies for third-party advertising or cross-site behavioural profiling.

ikon777 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, subject to any applicable legal retention obligations. Our general retention principles are as follows:

• Active Account Data: Retained for the duration of your Account registration and for a period of five (5) years following Account closure, in accordance with AML record-keeping requirements.
• Transaction Records: Retained for a minimum of seven (7) years in accordance with Malaysian financial record-keeping obligations, including records of FPX and DuitNow transactions.
• KYC Documentation: Retained for a minimum of five (5) years following the end of the business relationship, as required under anti-money laundering legislation.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, unless a longer period is required for dispute resolution purposes.
• Marketing Preference Data: Retained until you withdraw consent or request deletion, whichever occurs first.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual.

ikon777 may transfer your Personal Data to servers or service providers located outside Malaysia — for example, to internationally hosted cloud infrastructure or payment processing hubs — where this is necessary to deliver the Platform and associated services.

Where such transfers occur, ikon777 ensures that appropriate safeguards are in place to protect your Personal Data to a standard equivalent to that applied in Malaysia, including by:

• Entering into data processing agreements with all third-party recipients that include binding data protection obligations;
• Selecting service providers domiciled in jurisdictions recognised as providing adequate levels of personal data protection;
• Applying technical and organisational security measures — including encryption in transit and at rest — to all internationally transferred data.

Subject to applicable law, you have the following rights in relation to your Personal Data held by ikon777. To exercise any of these rights, please contact our Data Protection team at the details provided in Section 14.

ikon777 will respond to all data rights requests within 30 calendar days. Where a request is complex or numerous in volume, we may extend this period by up to an additional 60 days and will notify you accordingly. We may need to verify your identity before processing a request.

ikon777 implements a comprehensive range of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and ikon777 servers is encrypted using TLS 1.2 or higher (256-bit).
• Encryption at Rest: Sensitive Personal Data and KYC documentation stored on ikon777 servers is encrypted at rest using industry-standard algorithms.
• Access Controls: Internal access to Personal Data is restricted on a role-based, need-to-know basis. All staff with access to Personal Data are subject to confidentiality obligations.
• Two-Factor Authentication: All internal administrative systems that access Personal Data require multi-factor authentication.
• Penetration Testing: ikon777 conducts regular third-party security assessments and penetration tests to identify and remediate potential vulnerabilities.
• Incident Response: ikon777 maintains a documented data breach response procedure. In the event of a breach likely to cause harm to individuals, we will notify affected Players and relevant authorities as required by applicable law.

ikon777 is a gaming platform intended exclusively for adults. The Platform is strictly restricted to individuals aged 21 years and above. We do not knowingly collect Personal Data from any person under the age of 21.

ikon777 employs mandatory age verification as part of the KYC process. Any Account found to have been registered by or on behalf of a person under the age of 21 will be immediately closed, all deposits returned (subject to verification), and any associated Personal Data deleted or anonymised in accordance with applicable law.

If you believe a minor has registered an Account on ikon777, please contact our support team immediately at [email protected].

ikon777 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. Revised versions will be published on this page with an updated effective date.

Where changes are material — such as a significant new category of data collection or a new purpose for which existing data will be used — we will provide reasonable advance notice via Platform notification or email to your registered address, and where required by law, obtain fresh consent before the change takes effect.

Your continued use of the Platform following the publication of an updated Policy constitutes acceptance of the revised terms. We encourage you to review this Policy periodically.

If you have any questions, concerns, or complaints regarding this Privacy Policy, or if you wish to exercise any of your data rights described in Section 10, please contact the ikon777 Data Protection team using the following channels:

• Email: [email protected] — Please include "Privacy Request" in the subject line for data rights enquiries.
• Live Chat: Available 24 hours a day, 7 days a week through the in-Platform chat interface. For data privacy matters, please request escalation to the Data Protection team.
• Response Time: All privacy-related enquiries will be acknowledged within 5 business days and substantively addressed within 30 calendar days of receipt.

If you are not satisfied with ikon777's response to a privacy complaint, you have the right to escalate the matter to Malaysia's Personal Data Protection Department (PDPD), the regulatory body responsible for enforcing the Personal Data Protection Act 2010.