Privacy Policy M89 — Protecting Your Personal Data

M89 collects personal information solely to provide you with a safe, seamless, and trusted gaming experience. The following are the categories of information we collect:

Registration Information

• Full name as shown on your official identification document.
• Date of birth to verify that you meet the minimum age requirement of 18 years.
• Active email address used for account communications.
• Mobile phone number for two-factor authentication and important notifications.
• Username and password chosen during registration (passwords are stored in an unreadable hashed format).

Identity Verification Information (KYC)

• A copy of your Malaysian identity card (MyKad) or valid passport.
• Recent proof of address such as a utility bill or bank statement not older than three months.
• Bank account or digital wallet information for deposit and withdrawal purposes.

Platform Usage Information

• Wagering history, games played, and financial transaction records.
• IP address, device type, operating system, and browser used.
• Login session times and duration, as well as general platform usage patterns.

Your personal data is collected through several transparent and lawful methods:

• Directly from you — when you register an account, submit KYC documents, make a deposit or withdrawal, contact our support team, or complete preference forms in your account settings.
• Automatically during your use of the platform — through cookies, server logs, and tracking technologies that capture technical information about how you interact with the m89 platform.
• From third-party service providers — including payment providers who verify your transactions, and identity verification service providers who assist with our KYC process.
• From publicly available sources — in specific cases where information verification is required for security purposes or anti-money laundering compliance.

All data collection methods we use are lawful, transparent, and subject to your consent as provided during account registration and continued use of our platform.

The information we collect is used for the following pre-defined purposes:

M89 will not use your data for any purpose beyond those stated above without obtaining your additional consent beforehand. If you do not wish to receive promotional communications, you may withdraw that consent at any time through your account settings.

M89 takes a highly cautious approach to sharing your personal data. In general, we do not share your information with external parties except in the following limited and necessary circumstances:

• Payment service providers — information required to process your deposits and withdrawals is shared with registered and trusted payment providers, who are bound by strict confidentiality agreements.
• KYC service providers — third-party providers who assist us in verifying the identity of new members. This sharing is limited to the data required for verification only.
• Game providers — the minimum technical data required by third-party game providers to ensure a smooth and fair gaming experience. These providers do not receive your financial or personal identity information.
• Legal authorities — M89 will disclose required information to authorities when mandated by court order, regulatory directive, or other legal obligations.

Protecting your personal data is M89's top priority. We continually invest in security infrastructure to ensure your information remains safe at all times:

• 256-bit SSL encryption protects all data transmitted between your device and our servers — on par with the security systems used by major banking institutions.
• Your database is stored on servers protected by multi-layered firewalls, intrusion detection systems, and 24/7 security monitoring.
• Your password is never stored in plain text — it is processed using an irreversible cryptographic hashing algorithm.
• Two-factor authentication (2FA) is available for all accounts as an additional layer of protection, which we strongly encourage all users to activate.
• Regular security audits are conducted by our internal security team and independent external auditors to identify and address system vulnerabilities before they can be exploited.
• Staff access to member data is restricted on a need-to-know basis, and all access is logged and monitored.

M89 retains your personal data only for as long as necessary for the defined purposes or as required by applicable law. The following are our data retention guidelines:

• Active account data — retained for as long as your account remains active on the m89 platform.
• Financial transaction records — retained for a minimum of 7 years from the transaction date, in accordance with applicable financial and anti-money laundering legal requirements.
• Support communication records — retained for 3 years to allow reference in the event of disputes or follow-up enquiries.
• Activity and security logs — retained for 12 months for security audit and incident investigation purposes.
• Closed account data — upon account closure, data not required to be retained by law will be deleted or anonymised within 90 days.

Once the retention period expires, your data will be securely deleted using methods that ensure it cannot be recovered. Data that must be retained longer due to legal requirements will be stored in an isolated environment with strictly limited access.

The m89 platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform operates smoothly. The following are the types of cookies we use:

• Essential Cookies — required for core platform functions such as login session verification, security, and navigation. These cookies cannot be disabled as they are critical to platform operation.
• Performance Cookies — collects information about how you use the platform (e.g., most frequently visited pages) to help us improve the overall user experience.
• Functional Cookies — stores your preferences such as language selection, display settings, and game choices to personalise your experience.
• Analytics Cookies — helps us understand platform usage patterns in aggregate and anonymised form for analysis and service improvement purposes.

You can manage your cookie settings through your browser at any time. Please note that disabling certain cookies may affect the functionality of some parts of the platform. Session cookies are automatically deleted when you close your browser, while persistent cookies have a set expiry period.

As the owner of your personal data, M89 recognises and respects the following rights you hold:

In the course of its operations, m89 may need to transfer your personal data to servers or service providers operating outside Malaysia. This arises primarily in the following contexts:

• Server infrastructure and cloud computing providers that may operate across multiple geographic locations to ensure optimal platform performance and availability.
• International gaming service providers that require minimal technical data to deliver game content to our members.
• International support and KYC service providers that assist us in day-to-day operations.

When data is transferred outside Malaysia, m89 ensures that protection equivalent to or exceeding Malaysian legal requirements is applied through legally binding data processing agreements, the use of recognised standard contractual clauses, or transfers to jurisdictions with adequate levels of data protection.

M89 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or service improvements we implement.

• Any material changes to this policy will be communicated to you via in-platform notifications or your registered email at least 14 days before the changes take effect.
• The "Updated" date at the top of this page reflects the date of the latest revision.
• Your continued use of the m89 platform after the effective date of any amendment constitutes your acceptance of the updated policy.
• If you disagree with any changes, you have the right to close your account and stop using the platform before the changes take effect.

We encourage you to review this page regularly to stay informed about how we protect your information. The latest version of this Privacy Policy is always available on this page.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how M89 handles your personal data, please contact us through the following channels:

• Live Chat 24/7 — the fastest way to get a response. Access via the chat icon available on every page of the m89 platform.
• Support Email — [email protected] for written enquiries that require documentation.
• FAQ Section — visit our FAQ page for answers to frequently asked questions about privacy and your account.

Our team is committed to responding to all privacy-related inquiries within 3 business days. For formal data rights requests, please clearly state the specific right you wish to exercise and include the required identity verification information. All information submitted through this channel will be handled securely and confidentially.