Privacy Policy

This Privacy Policy ("Policy") describes how PT89 ("the Company", "we", "us", "our"), operator of the online gambling platform accessible at pt89.cam ("the Platform"), collects, uses, stores, discloses, and protects the personal data of individuals ("Users", "you", "your") who register for or use the PT89 service.

PT89 is committed to handling personal data responsibly and in accordance with applicable international data protection standards. We process personal data in good faith, with transparency, and only for legitimate purposes directly related to the operation and improvement of the Platform.

By registering an account on PT89 or using any part of the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree to this Policy, you should not register an account or use the Platform.

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information that identifies or could reasonably identify a natural person, directly or indirectly, including name, identification number, contact details, location data, or online identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, transmission, restriction, erasure, or destruction.
• "Data Controller" means PT89, which determines the purposes and means of processing personal data.
• "Data Processor" means a third party that processes personal data on behalf of PT89 under contractual instructions (e.g., payment processors, KYC verification providers).
• "Consent" means freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for one or more specific purposes.
• "Data Subject" means the natural person whose personal data is being processed — in this context, the PT89 account holder.
• "KYC" means Know Your Customer — the process of verifying a user's identity, age, and (where applicable) source of funds.

PT89 collects personal data in several ways: directly from you when you register an account or interact with the Platform, automatically through technical means as you use the service, and from third-party identity verification and payment partners. The categories of data we collect include:

Full legal name, date of birth, gender, residential address (including city and postcode — commonly Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, or Johor Bahru for our Malaysian users), email address, and mobile phone number. This data is collected at registration and during KYC processes.

Copies or images of government-issued identity documents submitted during KYC, including Malaysian MyKad, Driver's Licence, or International Passport (photo page); proof of address documents such as utility bills (Tenaga Nasional, Syabas) or bank statements; and selfie photographs taken for liveness verification purposes.

Details of deposits and withdrawals, including payment method type (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX bank reference, or cryptocurrency wallet identifier), transaction amounts in MYR or cryptocurrency equivalent, timestamps, and transaction reference numbers. Note: PT89 does not store full bank account numbers, card numbers, or e-wallet PINs.

Records of games played (slots, live dealer, sports bets), wager amounts and outcomes, session duration and frequency, bonus activations and wagering progress, and any self-exclusion or responsible gambling tool activations.

IP address, device type and operating system, browser type and version, unique device identifiers, time zone, and referring URL. This data is collected automatically and used for security, fraud detection, and platform optimisation purposes.

Records of communications between you and PT89's customer support team, including live chat transcripts, email correspondence, and support ticket content. These records are retained to ensure quality of service and for dispute resolution purposes.

PT89 processes personal data only where a lawful basis exists for doing so. The table below sets out the primary processing purposes and the corresponding lawful basis:

PT89 uses cookies and similar tracking technologies (including web beacons and pixel tags) to operate the Platform, enhance user experience, and gather analytics data. Cookies are small text files stored on your device when you visit pt89.cam.

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens, security cookies, and load balancing identifiers. You cannot opt out of these without preventing use of the Platform.
• Functional Cookies: Remember your preferences such as language selection, game display settings, and login state. These improve your experience but are not essential to Platform operation.
• Analytics Cookies: Aggregate, anonymised data about how users navigate the Platform, which pages are visited most frequently, and where errors occur. Used to improve Platform design and performance.
• Marketing Cookies: Used only where you have given explicit consent to receive personalised promotional communications from PT89. You can withdraw this consent at any time through your account settings.

You can control non-essential cookies through your browser settings. However, disabling certain cookies may affect Platform functionality. Your continued use of PT89 after reviewing this notice constitutes acceptance of our use of strictly necessary cookies.

PT89 does not sell or rent personal data to third parties. We may share personal data with the following categories of recipients, strictly limited to what is necessary for the identified purpose:

• Payment Processors: Malaysian payment service providers including FPX gateway operators, e-wallet providers (Touch 'n Go, Boost, GrabPay), and DuitNow infrastructure partners, solely for the purpose of processing your financial transactions.
• KYC Verification Partners: Third-party identity verification service providers engaged to verify the authenticity of identity documents submitted during account registration or KYC review. These providers operate under strict data processing agreements.
• Game Software Providers: Our casino and sports betting game providers may receive limited session data (player ID, wager values, game outcomes) to operate their games correctly. They do not receive identity or financial data.
• Regulatory Authorities: PT89 may be required to disclose personal data to regulatory, licensing, or law enforcement authorities pursuant to a valid legal order, regulatory direction, or anti-money laundering investigation. PT89 will notify affected users where legally permitted to do so.
• IT & Infrastructure Providers: Cloud hosting, data centre, and cybersecurity providers who process data solely on PT89's instructions under confidentiality agreements.

PT89 implements a layered technical and organisational security framework to protect personal data against unauthorised access, loss, destruction, alteration, or disclosure. Our key security measures include:

• Encryption in Transit: All data transmitted between your device and PT89's servers is encrypted using TLS 1.2 or higher. The padlock symbol in your browser confirms an active encrypted connection.
• Encryption at Rest: Stored personal data is encrypted using AES-256 encryption. Database-level encryption is applied to all records containing sensitive personal or financial data.
• Access Controls: Access to personal data within PT89's systems is restricted on a strict need-to-know basis. Staff access is governed by role-based permissions, multi-factor authentication, and audit logging.
• Intrusion Detection: PT89 operates continuous network monitoring and intrusion detection systems. Security incidents are responded to in accordance with a documented incident response procedure.
• Penetration Testing: PT89's systems undergo regular third-party security assessments and penetration testing to identify and remediate vulnerabilities.

While PT89 takes all reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure. You are responsible for maintaining the confidentiality of your PT89 account credentials and for ensuring that no unauthorised person gains access to your account.

PT89 retains personal data for only as long as is necessary for the purpose for which it was collected, subject to applicable legal and regulatory retention obligations:

• Active Account Data: Retained for the duration of the account's active status plus six (6) years following account closure. This extended retention period is required to satisfy AML recordkeeping obligations, licensing requirements, and potential dispute resolution needs.
• KYC Documents: Retained for a minimum of five (5) years from the date of submission or from the date the account relationship ends, in accordance with anti-money laundering regulations applicable to licensed gaming operators.
• Transaction Records: Retained for six (6) years from the date of the transaction to satisfy financial audit and AML obligations.
• Customer Support Communications: Retained for three (3) years from the date of the last communication in a support thread, unless the communication relates to a dispute that remains unresolved.
• Marketing Preferences: Retained for as long as your account is active and marketing consent is in place, or until you withdraw consent, at which point the relevant preference is updated immediately.
• Anonymised Analytics Data: May be retained indefinitely in aggregated, anonymised form that cannot be used to identify any individual.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised using industry-standard data destruction procedures.

As a Data Subject, you have the following rights with respect to the personal data PT89 holds about you. PT89 will respond to all valid data subject requests within thirty (30) calendar days of receipt. Some rights are subject to legal limitations — PT89 will communicate any applicable limitations clearly when responding to requests.

To exercise any of the above rights, submit a written request to [email protected] from the email address registered to your PT89 account. We may ask you to verify your identity before processing the request. There is no charge for standard data subject requests; however, PT89 reserves the right to charge a reasonable administrative fee for manifestly unfounded or excessive requests.

PT89 operates an online gambling service that is strictly restricted to adults aged 21 and above. PT89 does not knowingly collect, process, or retain personal data relating to any person under the age of 21.

All account registrations require age verification during the KYC process. Any account found to have been created by a person under 21 will be immediately closed, all related personal data will be deleted in accordance with legal obligations, and any deposits will be returned to the source payment method.

PT89 may send you promotional communications — including bonus offers, new game announcements, sports betting promotions, and platform updates — by email or in-platform notification, but only where you have given explicit consent to receive such communications at the time of account registration or at any subsequent point.

You may withdraw consent to marketing communications at any time by:

• Clicking the "Unsubscribe" link included in every marketing email we send;
• Updating your communication preferences in your PT89 account settings; or
• Contacting PT89 support at [email protected] and requesting removal from marketing lists.

Withdrawal of marketing consent does not affect your ability to use the PT89 Platform, nor does it affect the processing of personal data required for account management, transactions, or legal compliance purposes. Transactional and service communications (e.g., withdrawal confirmations, account security alerts) will continue to be sent regardless of marketing preferences.

The PT89 Platform may contain links to third-party websites, payment portals, or service providers. These third-party sites operate under their own independent privacy policies, which PT89 has no control over and does not endorse or accept responsibility for. When you click a link that takes you to a third-party site, PT89's Privacy Policy no longer applies to your interactions on that site.

PT89 recommends that you review the privacy policy of any third-party site you visit, particularly when submitting personal or financial information. Examples of third-party services you may be redirected to include Malaysian bank portals when completing FPX transactions, or e-wallet platforms such as Touch 'n Go and Boost when processing payments.

PT89 may update this Privacy Policy periodically to reflect changes in our data processing practices, new legal obligations, or improvements in how we communicate our privacy commitments. The most current version of this Policy will always be available at pt89.cam/privacy-policy, and the effective date displayed at the top of the document will be updated accordingly.

For material changes — those that significantly affect how your data is used or the rights available to you — PT89 will notify registered account holders via email at least seven (7) days before the changes take effect. Your continued use of the Platform after the effective date of any update constitutes acceptance of the revised Policy. If you do not accept the updated Policy, you should cease using the Platform and may request voluntary account closure.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a complaint about how PT89 has handled your personal data, please contact our Data Protection team using the details below.

If you are dissatisfied with PT89's response to a privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in the jurisdiction applicable to PT89's licensing arrangement. PT89 will cooperate fully with any such authority in the handling of complaints.