Privacy Policy m89 — Data Protection Malaysia Members

Welcome to the m89 Privacy Policy. This document is provided to give you a clear and comprehensive understanding of how the m89 platform handles your personal information — from the moment you first browse our website to when you become an active member making full use of our services.

M89 operates as a trusted online entertainment platform in Malaysia, offering a wide range of Live Casino games, slots, sports betting, and more. In delivering these services, we need to collect certain personal information from our users. We understand this is a significant trust, and we take this responsibility seriously.

This Privacy Policy applies to all members, visitors, and users who access the m89 platform via the website, mobile app, or any other digital channel provided by m89. By continuing to use our platform, you agree to the data protection practices described in this policy.

M89 collects various types of information depending on the nature of your interaction with our platform. We only collect data that is genuinely necessary to deliver quality services, comply with legal requirements, and protect the integrity of the platform.

In addition to information you provide directly, m89 also collects data automatically when you use the platform, including server log information, cookie data, and tracking technologies detailed in section 6 of this policy.

Every piece of information we collect has a clear and legitimate purpose. m89 uses your personal data solely for the purposes stated below and will not use it for any other purpose without notifying you in advance.

• Account Management: Creating and maintaining your member account, processing registrations, verifying identity through KYC, and enabling secure access to the platform.
• Transaction Processing: Processing deposits, withdrawals, and all other financial transactions accurately and promptly.
• Platform Security: Detecting and preventing fraud, money laundering, multi-account usage, hacking, and any suspicious activity that could compromise the security of the platform or other members.
• Legal Compliance: Meeting legal, regulatory, and licensing obligations, including anti-money laundering (AML) requirements and consumer protection standards.
• Customer Support: Responding to enquiries, resolving complaints, and providing technical assistance required by members.
• Personalise Your Experience: Tailoring content, promotions, and game recommendations based on your preferences and play habits for a more relevant experience.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and provide appropriate support to members who need it.
• Platform Communications: Sending important notices related to your account, policy updates, security information, and promotions you have agreed to receive.

M89 adheres to the principle of data minimisation — we only use data that is genuinely necessary for the stated purposes and nothing beyond that. If we wish to use your data for a new purpose not previously stated, we will obtain your consent first.

M89 does not sell, rent, or trade members' personal data to third parties. However, in certain legitimate situations, we may need to share some of your information with the following parties, solely to enable m89's services to function properly:

• Payment Service Providers: Payment gateways, banks, and e-wallet providers that process your transactions require basic information to verify and complete payments.
• Game Providers: Companies providing Live Casino games, slots, and sports betting may receive the minimum technical data required to deliver game content.
• KYC Verification Services: Third-party providers that assist with identity verification and background checks for legal compliance purposes.
• Statutory Authorities: Where required by law, court order, or a valid request from an enforcement agency, m89 will disclose the necessary information.
• Analytics & Security Services: Technical service providers that assist us in detecting fraud, analysing platform performance, and ensuring system security.

All third parties that receive data from m89 are bound by strict confidentiality agreements and are only permitted to use that data for the agreed purposes. They may not use m89 member data for their own interests.

The security of your personal data is m89's highest priority. We continuously invest in the latest security infrastructure to ensure your information is always protected from unauthorised access, loss, destruction, or accidental disclosure.

Key security measures we use to protect your data:

• Data Encryption in Transit: All communications between your browser or app and m89's servers are encrypted using TLS 1.3 with 256-bit SSL encryption, ensuring no third party can intercept or read your data in transit.
• Data Encryption at Rest: Personal and financial data stored in the m89 database is also encrypted for layered protection.
• Strict Access Controls: The principle of least privilege access is applied — only staff who genuinely require access to specific data are permitted, and all access is logged and monitored.
• Two-Factor Authentication: m89's internal systems use multi-factor authentication to prevent unauthorised access even in the event of a compromised password.
• Regular Security Audits: m89 conducts regular penetration testing and security audits by independent experts to identify and address any vulnerabilities.
• 24/7 Monitoring: An automated threat detection system monitors the m89 platform around the clock to identify unusual activity instantly.

The m89 platform uses cookies and similar tracking technologies to enhance the user experience, understand how our platform is used, and ensure session security. Cookies are small text files stored on your device by your web browser when you browse a website.

We use several types of cookies for different purposes:

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled as the platform cannot function without them.
• Preference Cookies: Saving your preferences such as language, display settings, and game preferences to streamline repeat visits.
• Analytics Cookies: Helping us understand how members interact with the platform — which pages are visited most, time spent, and any technical issues encountered. This data is used in aggregate and is not used to identify individuals.
• Security Cookies: Used to detect suspicious login attempts, CSRF attacks, and other abnormal activity to protect your account.

You can manage or delete cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of some sections of the m89 platform. For more information on managing cookies, refer to your browser's help documentation.

M89 fully recognises and respects your rights as the owner of your personal data. You have meaningful control over your personal information and may exercise the following rights at any time:

To exercise any of the above rights, please contact the m89 support team via our platform's live chat. We will process your request within a reasonable timeframe, typically within 14 business days. In some cases, we may need to verify your identity before processing any data-related request.

M89 retains your personal data only for as long as necessary to fulfil the purposes of collection or as required by applicable laws and regulations. When data is no longer needed, it will be securely deleted or anonymised.

• Active Account Data: Retained for the duration your account is active and for the required period following account closure for audit and compliance purposes.
• Financial Transaction Records: Retained for a minimum of seven (7) years as required by applicable anti-money laundering and taxation legislation.
• Support Communication Logs: Retained for three (3) years for reference and dispute resolution purposes.
• Technical Data & Server Logs: Retained for 12 months for security and digital forensics purposes should an investigation be required.
• Marketing Data: Retained until you withdraw consent or request the cessation of marketing communications.

Once the designated retention period has expired, data will be securely deleted or anonymised so that it can no longer be linked to you. Data deletion is an irreversible process — once deleted, we are unable to recover that information.

The m89 platform is strictly for adult users aged 18 and above. We do not knowingly collect, store, or process any personal information from individuals under the age of 18.

If we discover that personal data of a minor has been collected inadvertently, we will take immediate action to delete that information and close the relevant account. Parents or guardians who find that their child has registered on the m89 platform should contact our support team immediately.

M89 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or technological developments. Any significant changes will be communicated to members via a notice on the platform or by email.

The "Updated" date at the top of this page will always reflect the latest version of the Privacy Policy. You are encouraged to review this page periodically. Continued use of the m89 platform after a policy amendment is considered acceptance of the updated terms.

If you have any questions, concerns, or requests regarding this Privacy Policy or how m89 handles your personal data, our team is ready to assist you at any time.

• Live Chat: The fastest way — click the chat icon in the corner of the platform to connect with our support agent in real time, 24 hours a day, 7 days a week.
• Support Email: [email protected]
• Response Time: We aim to respond to all privacy-related enquiries within 48 business hours.

For official requests relating to personal data such as access, correction, or deletion, please clearly state the type of request and include the necessary identity verification information so that we can process your request promptly and securely.