Official Documents

Privacy Policy irace – Malaysian Player Data Protection

Your privacy is our priority. This document clearly explains how irace collects, uses, stores, and protects your personal information when you use our platform.

Updated: 1 January 2026 | Bahasa Melayu

Irace Privacy Commitment

Six core principles that underpin how irace handles your personal data

Personal Data Encryption

All your personal data and financial transactions are protected with 256-bit SSL encryption at all times. Stored data is also encrypted at the database level using the latest industry standards.

Full Control in Your Hands

You have the right to access, amend, or request deletion of your personal data at any time. irace provides a straightforward and transparent process for exercising all your privacy rights.

No Sale of Data to Third Parties

Irace does not sell, rent, or disclose your personal information to any third party for marketing or commercial purposes without your explicit prior consent.

Secure Data Storage

Your data is stored on servers protected by multi-layered security systems, including firewalls, intrusion detection, and strict access controls. Only authorized personnel may access user data.

Immediate Incident Notification

In the event of any security incident involving your data, irace is committed to notifying you within the stipulated timeframe and taking immediate remedial action.

PDPA Legal Compliance

Irace data handling practices are designed to comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection requirements.

Important Note: By using the irace platform, you agree to the data handling practices described in this Privacy Policy. This Policy should be read together with Terms and Conditions irace.

1 Introduction

Irace values the privacy of every user who entrusts us with their personal information. This Privacy Policy is designed to give you a clear and comprehensive understanding of how we handle your personal data — from how it is collected and the purposes for which it is used, to who may access it and the steps we take to keep it secure at all times.

As an online betting platform serving Malaysian players, irace recognizes that trust is the most valuable asset you place in us. We therefore invest seriously in data security infrastructure and ensure every aspect of handling your personal information complies with the highest legal and ethical standards.

2 Personal Data We Collect

Irace collects various types of information to enable you to use the platform to its fullest and to ensure security and regulatory compliance. Below is a summary of the data types we collect:

Data Category Information Type Requirements
Personal Identity Full name, date of birth, national ID or passport number Mandatory (KYC)
Contact Information Email address, phone number, residential address Mandatory
Financial Information Bank account number, bank name, deposit and withdrawal transaction records Mandatory
Activity Data Game records, betting history, login logs, and in-platform activity Automatic
Device & Technical Data IP address, device type, web browser, operating system, cookie data Automatic
Communication Customer support conversation records, feedback, and complaints Where applicable

2.1 Information You Provide Directly

Most of the data we collect comes directly from you — during the account registration process, identity verification (KYC), deposit transactions, withdrawal requests, or when you contact our support team. It is important that you ensure all information provided is accurate and up to date, as data accuracy also affects the security of your account.

2.2 Information Collected Automatically

When you use the irace platform — whether via the website or mobile app — our systems automatically record certain technical information such as your device's IP address, browser type, operating system, and platform usage patterns. This data is used primarily for security, fraud detection, and improving the user experience.

3 How We Use Your Data

Irace uses collected personal data only for lawful and stated purposes. The following are the primary purposes for which your data is used:

  • Account management: Creating, verifying, and maintaining your account on the irace platform.
  • Transaction processing: Processing deposits, verifying wins, and executing withdrawals to your account.
  • Identity verification (KYC): Meeting legal compliance requirements related to age verification and player identity.
  • Security & fraud prevention: Detecting and investigating suspicious or unauthorized activity on the platform.
  • Customer support: Providing assistance and resolving any issues or inquiries you may have.
  • Platform communication: Sending important notifications regarding your account, service updates, and promotions (if you have consented to receive marketing communications).
  • Analytics & improvement: Understanding usage patterns to improve the platform, games, and overall user experience.
  • Legal compliance: Fulfilling applicable legal and regulatory obligations, including reporting requirements to the relevant authorities.
irace does not use your personal data to make automated decisions that materially affect you without human intervention. Any significant decisions such as account suspension or withdrawal rejection are reviewed by trained human staff.

4 Legal Basis for Data Processing

Irace processes your personal data on one or more valid legal bases under Malaysia's Personal Data Protection Act 2010 (PDPA):

  • Consent: You have given explicit consent during account registration for specific processing purposes such as marketing communications.
  • Contract performance: Processing is required to fulfill our contractual obligations to you, including processing transactions and maintaining your account.
  • Legal obligation: Processing is required to comply with applicable laws, including KYC requirements and anti-money laundering (AML) reporting.
  • Legitimate interest: Processing for security purposes, fraud prevention, and platform improvement that does not affect your fundamental rights.

5 Data Sharing with Third Parties

Irace does not sell or disclose your personal data to third parties for marketing purposes. However, there are specific situations where data sharing is necessary and permitted:

5.1 Authorized Service Providers

Irace works with carefully selected third-party service providers to carry out specific platform functions, including payment service providers and banking gateways, licensed game software providers, KYC identity verification services, and customer support platforms. All providers are required to adhere to privacy standards equal to or stricter than those of irace and are not permitted to use your data for any other purpose.

5.2 Legal Requirements & Authorities

Irace may disclose your personal data to the relevant authorities when required to do so by law, court order, or direction from a legitimate regulatory body. In each such case, we will disclose only the minimum information necessary and will endeavour to notify you where permitted by law.

irace never shares your personal data with advertisers, data brokers, or third-party marketing entities. If you receive a communication claiming to be from irace but requesting sensitive personal information, please contact us immediately as it may be a phishing attempt.

6 Cookies and Tracking Technologies

The irace platform uses cookies and similar tracking technologies to enhance the user experience and ensure the security of your login session. Cookies are small text files stored on your device by your web browser when you visit our platform.

6.1 Types of Cookies Used

  • Essential cookies: Required for core platform functions such as maintaining login sessions and processing transactions securely. These cookies cannot be disabled.
  • Performance cookies: Collecting anonymized data on how you use the platform to help us improve it. All data is collected in aggregate.
  • Functional cookies: Remembering your preferences such as language and platform settings to make your experience more comfortable.

You can manage or disable non-essential cookies through your browser settings at any time. Please note, however, that disabling certain cookies may affect platform functionality.

7 Data Security Measures

Irace continually invests in robust security infrastructure to protect your personal data from unauthorized access, disclosure, alteration, or loss. The security measures we implement include:

  • 256-bit SSL/TLS encryption for all data transmitted between your device and irace servers.
  • Encryption of sensitive data at the database level, including financial information and KYC documents.
  • Two-factor authentication (2FA) for account login as an additional security layer.
  • 24/7 security monitoring by the irace cybersecurity team to detect any suspicious activity.
  • Periodic penetration testing conducted by independent third-party security firms.
  • Strict internal access controls — only authorized personnel with a legitimate business need may access user data.
While irace takes all reasonable steps to protect your data, no security system can be guaranteed 100% secure. You also play an important role in protecting your account by using a strong password and never sharing your login credentials with anyone.

8 Data Retention Period

Irace retains your personal data for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable law. Generally, account and transaction records are kept for a minimum of seven years following account closure to meet financial and compliance legal requirements.

Technical activity data such as server logs and session records is typically retained for a shorter period of between 90 days and 12 months, unless the data is required for an ongoing security investigation or legal proceedings. Once the designated retention period ends, your data will be securely deleted or anonymized.

9 Your Privacy Rights

As an irace platform user, you have privacy rights that we fully respect under applicable data protection laws:

Right of Access

You have the right to request a copy of the personal data we hold about you at any time.

Right to Rectification

You may request correction of any inaccurate or incomplete personal data.

Right to Erasure

You may request deletion of your personal data subject to applicable legal obligations.

Right to Restriction

You may request that we restrict the processing of your data in certain circumstances provided by law.

Right to Data Portability

You may request your data in a structured, machine-readable format for transfer.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time.

To exercise any of the above rights, please contact the irace privacy team via Live Chat on the platform or visit the FAQ us for further guidance. We will process your request within a reasonable timeframe and no later than 30 business days.

10 Child Protection

The irace platform is a service exclusively for individuals aged 18 and above. irace does not intentionally collect or process personal data of individuals under 18. If we discover that a minor's personal data has been inadvertently collected, we will take immediate steps to delete that data and close the relevant account. Parents or guardians who believe their child may have registered on irace are advised to contact us immediately.

11 Amendments to the Privacy Policy

Irace reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or platform improvements. Any material amendments will be communicated to you via your registered email or in-platform notification at least 14 days before the changes take effect. Continued use of the platform after the effective date of any amendment constitutes acceptance of the updated policy.

We encourage you to review this Privacy Policy page periodically to stay informed about how we protect your information. The "Updated" date at the top of this document reflects when the last amendment was made.

12 Contact Us About Privacy

If you have any questions, concerns, or complaints regarding how irace handles your personal data, our privacy team is ready to assist. You can reach us through the following channels:

  • Live Chat: Available on the irace platform, 24 hours a day, 7 days a week.
  • Email: [email protected] (for privacy and data protection enquiries)
  • FAQ Section: Visit FAQ page us for answers to frequently asked questions.

We are committed to addressing every privacy inquiry seriously and within the stipulated timeframe. Your trust is the foundation of our relationship, and we take this responsibility seriously.

This Privacy Policy is part of irace's broader user protection framework. Please also read Terms and Conditions and policy Responsible Gaming us for a full overview of irace's commitment to Malaysian players.

Related Documents

Other policies governing the overall use of the irace platform

Your Data is Safe with irace

Play with Peace of Mind, Your Privacy Protected

Register an irace account today and enjoy a secure gaming experience backed by international-standard personal data protection.

256-bit SSL Encryption Malaysia PDPA Compliance No Data Sales 24/7 Privacy Support
Bahasa Melayu