Privacy Policy grab89

1Introduction

Grab89 is an online gaming platform operating to meet the entertainment needs of Malaysian players. We place the highest value on the trust you place in us when using this platform, and protecting your personal data is among our top priorities.

This Privacy Policy is drafted in accordance with the Malaysia Personal Data Protection Act (PDPA) 2010 and clearly explains how we handle your personal information — from how it is collected, what it is used for, who it is shared with, to how it is protected and how long it is retained.

This document should be read together with the Terms and Conditions and Responsible Gaming Policy grab89. These three documents together form the complete agreement framework between you and grab89. If there is any conflict between these documents, this Privacy Policy shall apply to matters relating to personal data.

2Information We Collect

Grab89 collects the information necessary to provide a safe, fair, and responsible service. We do not collect information beyond what is required to operate our platform. The following are the categories of information we collect:

2.1 Information You Provide Directly

• Registration Information: Full name, date of birth, email address, phone number, and account password.
• Identity Verification (KYC) Information: A copy of your identity card (MyKad), passport, or other official documents required to verify your identity.
• Financial Information: Bank account details, credit/debit card numbers (stored in masked format), and digital wallet information used for transactions.
• Profile Information: Game preferences, account settings, and other information you choose to share with us.
• Communications: Records of your correspondence with the grab89 support team via live chat, email, or other communication channels.

2.2 Information Collected Automatically

• Device Data: Device type, operating system, phone model, unique device identifier, and screen resolution.
• Network Data: IP address, internet service provider (ISP) name, and geographic location based on IP.
• Platform Usage Data: Game records, total wagering amounts, wins and losses, session duration, and in-platform navigation activity.
• Cookie Data: Login session data, language preferences, and platform usage analytics.
• Technical Logs: Records of access times, technical errors, and transaction logs for audit and security purposes.

3How We Use Your Data

Grab89 uses the data collected for legitimate and transparent purposes. Every use of data has a clear justification, and you have the right to know what those purposes are:

Purpose of Use	Data Type	Legal Justification
Service Provision Process registrations, deposits, withdrawals, and gameplay	Personal information, financial	Contract performance
Identity Verification (KYC) Verify the age and identity of users	Identity document	Legal obligation
Platform Security Detect fraud and prevent money laundering	Transaction data, activity logs	Grab89's legitimate interests
Customer Support Respond to enquiries and resolve issues	Account information, communications	Contract performance
Responsible Gaming Monitor gaming patterns and provide assistance	Platform usage data	Legitimate interests & public protection
Marketing Communications Send promotions and special offers (with consent)	Email, phone number	User Consent
Platform Improvements Data analysis to improve user experience	Usage data (anonymised)	Grab89's legitimate interests

4Data Sharing with Third Parties

Grab89 does not sell, rent, or trade your personal data to any third party for marketing purposes. However, there are limited situations where we need to share your information with the following parties:

4.1 Trusted Service Providers

Grab89 works with trusted third-party service providers to support our platform's operations. These providers are only permitted to use your data for the purposes we specify and are bound by strict confidentiality agreements:

• Payment Processor: To securely process deposits and withdrawals through recognised payment channels.
• KYC Service Provider: To verify user identity in compliance with legal requirements.
• Cloud Infrastructure Provider: To securely store and process data in a certified server environment.
• Analytics Services: To understand platform usage patterns for service improvement purposes (data is anonymised).

4.2 Legal Requirements

Grab89 may disclose your personal data when required by law or by a directive from a legitimate authority, including:

• A court order or valid legal process.
• Requests from Malaysian law enforcement agencies in criminal investigations.
• Reporting obligations under the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA).

5Data Storage & Security

The security of your data is a responsibility that grab89 takes very seriously. We continuously invest in the latest security infrastructure to ensure your information remains protected against cyber threats at all times.

5.1 Technical Security Measures

• Data Encryption in Transit: 256-bit SSL/TLS encryption for all communications between servers and clients.
• Data Encryption at Rest: Sensitive data such as financial information is stored in encrypted format in the database.
• Two-Factor Authentication (2FA): Available to all user accounts as an additional layer of protection.
• 24/7 Security Monitoring: An intrusion detection system operating around the clock to detect and respond to threats in real time.
• Regular Security Audits: Penetration testing and independent security audits conducted periodically by third-party experts.

5.2 Data Retention Period

Grab89 retains your personal data according to the following schedule, unless a longer period is required by law:

• Active Account Data: Retained for the duration your account remains active and in use.
• Closed Account Data: Retained for 7 years after account closure to meet legal and audit requirements.
• Transaction Records: Retained for 7 years in accordance with Malaysia's financial legal requirements.
• Communication Logs: Retained for 3 years for dispute resolution purposes.
• Cookie Data: Expiry varies by cookie type — session-based (when the browser is closed) or persistent (up to 12 months).

6Cookies & Tracking Technologies

Grab89 uses cookies and similar tracking technologies to enhance the user experience, maintain your login session, and help us understand how our platform is used. The following are the types of cookies we use:

6.1 Types of Cookies Used

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled as the platform will not function properly without them.
• Preference Cookies: Store your settings such as language preference, display theme, and game preferences so you do not need to reconfigure them each time you log in.
• Analytics Cookies: Help us understand how users interact with the platform through anonymous usage statistics. This data is used to improve the platform's design and functionality.
• Security Cookies: Used to detect suspicious activity, prevent unauthorised access, and protect the integrity of user sessions.

6.2 Managing Cookies

You can control and manage cookies through your web browser settings. Please note, however, that disabling essential cookies may affect the overall functionality of the grab89 platform. For guidance on managing cookies in your specific browser, please refer to the relevant browser help documentation.

7Your Rights as a Data Owner

Under the Malaysia Personal Data Protection Act (PDPA) 2010, you have the following rights regarding your personal data held by grab89. We are committed to ensuring these rights are straightforward to exercise:

• Right to Access: You have the right to request a copy of the personal data we hold about you. grab89 will process access requests within 21 working days.
• Right to Rectification: If you find that the data we hold is inaccurate or outdated, you have the right to request a correction. Corrections will be processed within 14 business days.
• Right to Withdraw Consent: For data collected based on your consent (such as marketing communications), you may withdraw your consent at any time without affecting the legality of prior processing.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data. However, such requests are subject to our legal obligations to retain specific data.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes or in circumstances where processing is carried out based on our legitimate interests.
• Right to Data Portability: You have the right to receive your personal data in a machine-readable format and transfer it to another service provider.

8Children's Data Protection

The grab89 platform is intended for users who are of age 18 years and above only. grab89 does not intentionally collect or process personal data from individuals under the age of 18.

We employ a strict age verification system during registration and the KYC process to ensure all users meet the minimum age requirement. Should we discover that a child's data has been collected without our knowledge, we will take immediate steps to:

• Delete all data associated with that child from our systems.
• Immediately close the account in question.
• Return any remaining balance in that account to the rightful parent or guardian.
• Report the incident to the relevant authorities if required.

If you suspect that a minor has registered or is using the grab89 platform, please contact our support team immediately so that prompt action can be taken.

9Changes to the Privacy Policy

Grab89 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, new legal requirements, or improvements in user data protection.

If there are significant changes to this Privacy Policy, we will notify you through the following means:

• A clear in-platform notification on grab89 during your first login session after the changes take effect.
• Email to the address registered in your account at least 7 days before the changes take effect.
• Update the "Last Updated" date at the top of this page.

Your continued use of the grab89 platform after the effective date of any changes constitutes your acceptance of the latest version of this Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your information.

10Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how grab89 handles your personal data, we are here to help:

• Data Protection Email: [email protected]
• Live Chat: Available 24/7 via the grab89 platform
• FAQ: Visit page FAQ us for an immediate response

Grab89's support team operates 24 hours a day, 7 days a week. We are committed to responding to all privacy-related enquiries within 3 working days. For urgent matters involving account security or data breaches, please mark your message as "URGENT" so it can be prioritised accordingly.