89bd Privacy Policy – Member Personal Data Protection

89bd ("we", "Platform" or "89bd") is committed to protecting the privacy of every individual who interacts with our services. This Privacy Policy explains in detail how we handle your personal information when you visit our website, register as a member, use the 89bd mobile app, or engage with any of the services we offer.

This document is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), which governs the processing of personal data for commercial transactions. We regard compliance with data protection law as the foundation of the trust you place in us, not merely a legal obligation.

This policy applies to all users of the 89bd platform, including visitors without an account, registered members, and anyone who interacts with our customer support or communication channels. If you disagree with any part of this policy, please stop using the platform immediately and contact us for further guidance.

89bd collects various types of personal information depending on how you interact with our platform. This data is collected directly from you, automatically through digital technology, and in some cases from legitimate third-party sources.

We only collect data that is strictly necessary for the stated purposes. This data minimisation principle ensures we never request information irrelevant to the services you use.

Every piece of data we collect is used for specific, legitimate, and clearly stated purposes. 89bd does not use your data for any purpose other than those outlined below, unless you have given explicit consent for additional uses.

• Account Management: Creating and managing your member account, including identity verification and mandatory KYC processes.
• Transaction Processing: Processing deposits, withdrawals and all financial transactions in your account securely and accurately.
• Platform Security: Detecting and preventing fraud, hacking, money laundering and any suspicious activity that could compromise the security of the platform or other members.
• Legal Compliance: Meeting reporting and disclosure obligations required under Malaysian law, including anti-money laundering (AML) and counter-terrorism financing (CFT) requirements.
• Customer Support: Processing enquiries, complaints and assistance requests you submit to the 89bd support team.
• Service Improvement: Analysing platform usage patterns on an aggregated and anonymised basis to improve user experience, system performance and product offerings.
• Marketing Communications: Sending promotional offers, bonuses and platform updates — only to members who have consented to receive such communications.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and enabling us to offer assistance or activate appropriate protection measures.

89bd does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. However, in the course of operating the platform, we may need to share certain information with the following parties under limited and controlled circumstances:

• Payment Service Providers: Banking institutions, payment processors, and e-wallet providers integrated with the 89bd platform to facilitate your financial transactions. These parties are bound by strict confidentiality agreements.
• Game Software Providers: Game software companies that provide slots, live casino, and other game content on our platform. Data shared is limited to what is necessary to process game sessions only.
• Identity Verification Providers: Third-party KYC and document verification services that help us confirm member identities as required by regulations.
• Regulatory Authority: Government agencies, regulatory bodies, or law enforcement authorities requesting information in the context of legitimate investigations or reporting obligations prescribed by Malaysian law.
• Professional Advisors: Lawyers, accountants or consultants bound by strict professional confidentiality obligations.

In all of the above sharing scenarios, we ensure that recipient parties are bound by data protection obligations equal to or stricter than 89bd's own standards.

The 89bd platform uses cookies and similar tracking technologies to enhance user experience, maintain session security, and collect aggregated platform analytics.

There are several types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication, session security, and language preferences. These cookies cannot be disabled as they are critical to platform operation.
• Performance Cookies: Collecting information about how visitors use our platform — such as the most frequently visited pages and error messages encountered — to help us improve platform performance.
• Functional Cookies: Allowing the platform to remember your preferences such as username, language and region to deliver a more personalised experience.
• Analytics Cookies: Helping us understand overall usage patterns through aggregated and anonymised data for service improvement purposes.

You can manage cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the 89bd platform.

The security of your personal data is the highest priority at 89bd. We implement multiple layers of technical and organisational controls to protect your information from unauthorised access, loss, destruction or accidental disclosure.

• 256-bit SSL Encryption: All communications between your device and the 89bd servers are secured with the highest-grade TLS/SSL protocols used by world-class financial institutions.
• Secure Password Storage: Your account password is never stored in plain text. We use a strong hashing algorithm with a unique salt for each account.
• Two-Factor Authentication (2FA): We provide and encourage the use of two-factor authentication for an additional layer of protection on your account.
• Strict Access Controls: Access to member personal data on our end is restricted on a need-to-know basis, with all access logged and audited regularly.
• 24/7 Security Monitoring: Our IT security team continuously monitors systems to detect and respond to any threats or anomalies in real time.
• Regular Penetration Testing: The 89bd platform undergoes regular security testing by independent security experts to identify and patch vulnerabilities before they can be exploited.

Under Malaysia's Personal Data Protection Act 2010 and 89bd's privacy policy, you have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you. We will process this request within a reasonable timeframe.
• Right to Rectification: If the personal data we hold about you is inaccurate or outdated, you have the right to request an immediate correction.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data. This right is subject to record-keeping obligations required by law.
• Right to Object to Processing: You may object to the processing of your data for direct marketing purposes at any time without providing a reason.
• Right to Restriction of Processing: In certain circumstances, you may request that we restrict the way we process your personal data.
• Right to Data Portability: You have the right to receive your personal data in a machine-readable format for the purpose of transferring it to another service provider.

To exercise any of the above rights, please contact our privacy team by email at [email protected] or via our platform's live chat. We will endeavour to process your request within 30 business days.

89bd retains your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable law. The following are general guidelines for data retention periods:

• Active Account Data: Retained for the duration your account remains active on the 89bd platform.
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date, in line with Malaysian accounting and anti-money laundering legal requirements.
• KYC Verification Data: Retained for a minimum of 5 years after the business relationship ends, in line with regulatory requirements.
• Support Communication Records: Retained for 3 years after the last interaction for reference and dispute resolution purposes.
• Aggregated Analytics Data: Fully anonymised data may be retained indefinitely as it no longer contains personally identifiable information.

Once the required retention period has ended, your personal data will be securely deleted or anonymised in accordance with our established data deletion procedures.

The 89bd platform may contain links or references to third-party websites or services. Please be aware that this Privacy Policy applies only to the 89bd platform and does not cover the privacy practices of other websites you may visit through links found on our platform.

89bd is not responsible for the content, privacy policies, or practices of any third-party websites or services. We encourage you to review the privacy policy of every website you visit before providing any personal information.

89bd reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data handling practices, applicable legal requirements, or new platform features. Any material changes will be communicated to members via in-platform notices or email.

The "Last Updated" date at the top of this document will be revised whenever changes are made. We encourage you to review this page periodically to stay informed of our latest policy. Your continued use of the 89bd platform after any changes are published constitutes acceptance of the updated Privacy Policy terms.

If you have any questions, concerns, or complaints regarding how 89bd handles your personal data, or if you wish to exercise any of your data protection rights, please contact our privacy team through the following channels:

• Privacy Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week via the chat icon at the bottom corner of the platform.
• Expected Response: We aim to respond to all privacy-related enquiries within 5 business days.