Privacy Policy PT89 – Your Data, Our Responsibility

PT89 only collects information that is genuinely necessary to provide you with a safe, fair, and enjoyable digital entertainment service. We do not collect excessive or irrelevant data beyond the scope of our service. Generally, the information we collect falls into three main categories:

Information You Provide Directly: This includes your full name, national identification number (MyKad/Passport), date of birth, email address, phone number, residential address, and bank account or e-wallet information registered when opening your PT89 account or during the KYC (Know Your Customer) process.

Information Collected Automatically: When you use the PT89 platform, our systems automatically record your IP address, device type, operating system, web browser, access date and time, and pages visited. This information is used solely to improve platform performance and detect security threats.

Financial Transaction Information: Every deposit, withdrawal, wager, and win is recorded in our system for compliance purposes, dispute resolution, and internal financial reporting.

The personal data you provide to PT89 is used responsibly for defined purposes. We do not use your data for purposes unrelated to the services you have subscribed to. The following are the primary purposes for which your data is used:

• Account Management: Creating and managing your PT89 account, including the identity verification process, login, and security controls.
• Transaction Processing: Processing all deposits, withdrawals, and wagers accurately and securely, including verification via DuitNow, bank transfers, Touch 'n Go eWallet, Boost, GrabPay, and ShopeePay.
• Customer Support: Responding to inquiries, resolving complaints, and providing the technical assistance you need via 24/7 Live Chat.
• Platform Security: Detecting and preventing fraud, hacking, account abuse, and other unlawful activities that could compromise your safety and that of other members.
• Regulatory Compliance: Meeting anti-money laundering (AML) legal requirements, financial reporting obligations, and established KYC requirements.
• Platform Improvements: Analyzing usage patterns in aggregate (without identifying individuals) to improve user experience, system performance, and game selection.
• Marketing (With Consent): Sending promotional notifications, bonus offers, and the latest PT89 news — only if you have consented to receive them.
• Responsible Gaming: Monitoring gameplay patterns to identify members who may need support and providing appropriate self-control tools.

PT89 processes your personal data based on one or more valid legal bases under Malaysia's Personal Data Protection Act 2010 (PDPA):

• Consent: For marketing activities and opt-in communications, we require and obtain your explicit consent before sending any such content.
• Contract Performance: The majority of data processing is necessary to fulfill the service agreement between you and pt89 — including payment processing, account management, and game delivery.
• Legal Obligations: Some data must be processed to fulfill pt89's legal obligations, including AML requirements, financial reporting, and compliance with lawful authority directives.
• Legitimate Interest: We process certain technical data based on PT89's legitimate interests in ensuring platform security, preventing fraud, and improving our services.

In all circumstances, PT89 ensures that data processing is proportionate, relevant, and not excessive relative to the intended purpose.

PT89 does not sell, rent, or disclose your personal data to third parties for commercial gain. However, in the course of normal service operations, your data may be shared on a limited basis with the following parties:

• Payment Service Provider: Registered payment gateways that process your deposits and withdrawals require minimal transaction information to complete payments securely.
• Game Software Providers: Licensed gaming companies providing slots, Live Casino, and Sports Betting may receive game session data required for technical operations.
• KYC Service Provider: A third-party identity verification platform that helps us verify identification documents and conduct required background checks.
• Relevant Authority: PT89 will disclose required data to legal authorities, regulators, or enforcement agencies when mandated by law or a valid court order.
• Audit & Compliance Partners: Independent auditors and compliance firms that assist PT89 in maintaining high operational standards may access certain data under strict confidentiality agreements.

PT89 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, misuse, or accidental disclosure.

Technical Security Measures Implemented:

• 256-bit SSL/TLS encryption for all data communications between your device and pt89 servers.
• Database-level data encryption for sensitive information such as passwords and financial details.
• Two-Factor Authentication (2FA) is available and encouraged for all member accounts.
• 24/7 real-time security monitoring with an active intrusion detection system (IDS).
• Regular vulnerability scanning and penetration testing conducted by independent security experts.
• Strict internal access controls — only authorised staff may access members' personal data, and every access is automatically logged.
• Encrypted data backups are stored at geographically separate locations to ensure service continuity.

Data Retention Period: PT89 retains your personal data for as long as your account is active, plus any mandatory retention period following account closure as required by applicable law (typically 7 years for financial records). Data that is no longer needed will be securely deleted using approved data disposal methods.

Under Malaysia's PDPA and PT89's internal policies, you have the following rights regarding your personal data. We are committed to facilitating the exercise of these rights at no additional cost:

To exercise any of the above rights, please contact the pt89 customer support team via Live Chat or our support email. We will process your request within 30 days working days from the date of receipt, and will notify you if a longer period is required for complex requests.

PT89 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for basic platform operations such as login session authentication, security, and language preferences. These cookies cannot be disabled.
• Performance Cookies: Helping us understand how members use the platform through anonymously collected analytics data, enabling us to improve performance and user experience.
• Functional Cookies: Saving your preferences such as screen resolution, display theme, and other personal settings to deliver a more comfortable experience on future visits.
• Marketing Cookies: Used (with your consent) to display relevant ads and promotions based on your interests. You may decline these cookies without affecting the core functionality of the platform.

You can manage your cookie settings through your web browser at any time. Please note that disabling essential cookies may affect certain features of the PT89 platform.

In certain operational situations, your personal data may be transferred to or accessed from countries outside Malaysia — for example, when we use cloud service providers or technical infrastructure located abroad.

PT89 ensures that any cross-border data transfers are carried out with adequate safeguards, including:

• Ensuring that recipient countries maintain a level of data protection equivalent to or higher than Malaysia.
• Using standard contractual clauses or approved transfer mechanisms to protect your rights.
• Implementing additional technical controls such as data encryption in transit and at rest.

If you would like to learn more about cross-border data transfers involving your information, please contact us through the channels listed in Section 11.

PT89 is a digital entertainment platform that only intended for individuals aged 18 and above. We do not knowingly collect, store, or process any personal information from individuals under the age of 18.

All account applicants are required to confirm they are at least 18 years of age at registration. Our KYC process also helps verify the actual age of new members. Should pt89 find that personal information of a minor has been collected without valid parental or guardian consent, we will immediately delete that information and close the account in question.

PT89 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or improvements to our services. Any significant amendments will be communicated to you via:

• Prominent notifications on the PT89 platform homepage.
• Email the address registered to your account.
• In-app notifications (if you have enabled notifications).

The "Updated" date at the top of this page will always reflect the date of the latest amendment. We encourage you to review this page periodically. Continued use of the pt89 platform after an amendment takes effect will be considered your acceptance of the updated policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how PT89 handles your personal data, our data protection team is available to assist you 24 hours a day, 7 days a week.

You can reach us through the following channels:

• Live Chat: Available directly on the pt89 platform — the fastest way to get an immediate response.
• Privacy Email: [email protected]
• Support Page: Visit our FAQ page for answers to frequently asked questions.

We are committed to responding to all privacy-related enquiries within 5 days working days. For formal complaints or complex data subject requests, we aim for resolution within 30 working days.