Idr89 Privacy Policy – Data Protection for Malaysian Players

This Privacy Policy is issued by idr89 ("we", "the Platform") and applies to all users who access or use idr89's services via the website https://idr89.my or any associated mobile application. This Policy sets out our privacy practices in a comprehensive and transparent manner.

Idr89 complies with Personal Data Protection Act 2010 (PDPA) Malaysia, and we take our data protection responsibilities seriously. We only collect data that is genuinely necessary to provide our services and never use your data for unrelated purposes without your consent.

By registering an idr89 account or using any of our services, you agree to the terms set out in this Privacy Policy. If you do not agree, please discontinue use of the platform and contact us to close your account.

Idr89 collects several categories of information from players to keep the platform running smoothly, securely, and at its best. Here is the information we may collect:

Registration & Identity Information

• Full name as shown on your official identification document (MyKad or passport)
• Date of birth (for age verification — players must be 18 years of age or older)
• Active email address
• Malaysian mobile number
• Username and password chosen during registration

Financial & Transaction Information

• Bank account or e-wallet details used for transactions (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX)
• Deposit and withdrawal history in Malaysian Ringgit (MYR)
• Betting records and gaming activity

Technical & Usage Information

• Device IP address when accessing the platform
• Web browser type, operating system and device model
• Session and in-platform activity data (pages visited, active time)
• Cookie and related tracking technology data (see Section 6)

KYC Verification Information

For players required to complete KYC (Know Your Customer) verification, we may request a copy of your MyKad, passport, utility bill, or recent bank statement. These documents are processed to the highest security standards and stored in a secure environment.

Idr89 uses collected personal data solely for legitimate purposes directly related to the operation of the platform. We do not use your data for any other purpose without your explicit consent.

Primary Purposes of Data Use

• Account Management: Creating, verifying, and managing your player account on the idr89 platform.
• Transaction Processing: Securely processes deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX in Malaysian Ringgit (MYR).
• Platform Security: Detecting and preventing fraud, hacking, money laundering, and other illegal activities.
• Legal Compliance: Meets Malaysian legal requirements including PDPA 2010, KYC obligations, and mandatory reporting.
• Customer Support: Responding to enquiries, resolving complaints, and providing technical support to players.
• Service Improvement: Analysing usage patterns to improve the overall playing experience on the idr89 platform.
• Account-Related Communications: Sends important notifications such as transaction confirmations, security alerts, and policy updates.
• Promotions & Offers: Sending you relevant idr89 promotional information — only where you have consented to receive marketing communications.

Idr89 does not sell, rent, or trade players' personal data to any third party for marketing or commercial purposes. However, in certain limited circumstances, we may share information with the following parties:

Payment Service Providers

To process deposit and withdrawal transactions, the necessary financial information is shared with approved payment providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and major Malaysian banks via FPX. Such sharing is kept to a minimum and is strictly for transaction processing purposes.

Technology & Software Providers

Certain idr89 platform functions are powered by trusted third-party software providers, including live casino, slots, and sports platform providers. These providers are bound by strict confidentiality agreements and receive only the minimum data necessary to deliver their services.

Legal Authorities

Idr89 will disclose personal information to the relevant authorities when required by Malaysian law, court order, or a directive from a legitimate law enforcement agency. We will notify players of such disclosures where permitted by law.

Idr89 invests heavily in cybersecurity infrastructure to ensure that players' personal and financial data remains protected at all times. The following security layers are in place:

• 256-bit SSL Encryption: All communication between your browser and idr89's servers is encrypted using the latest TLS protocol, ensuring your data cannot be read by unauthorised parties.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA via an authenticator app or SMS for an added layer of security on their idr89 account.
• 24/7 Activity Monitoring: idr89's automated monitoring system detects suspicious activity — such as unusual login attempts or irregular transaction patterns — in real time.
• Secure Password Storage: Player passwords are never stored in plain text — we use strong salted hashing methods.
• Server Isolation: Player data is stored in server environments isolated from public systems, with strict access controls in place.
• Regular Security Audits: idr89 conducts regular penetration testing and security audits to identify and address any vulnerabilities.

While we take all reasonable steps to protect your data, no system can guarantee absolute 100% security. If you suspect any unauthorised access to your idr89 account, please contact us immediately at support@idr89.my.

Idr89 uses cookies and related tracking technologies to enhance the user experience, analyse platform performance, and maintain the security of your login session.

Types of Cookies Used

You can manage or disable cookies through your web browser settings. Please note that disabling essential cookies may affect the login functionality and overall usability of the idr89 platform.

Idr89 retains players' personal data for as long as necessary to fulfil the original purpose of collection, or for as long as required under applicable Malaysian law.

• Active Account Data: Retained for the duration your account is active and for 7 years after account closure, in accordance with Malaysian tax and financial legal requirements.
• Transaction Records: Retained for a minimum of 7 years from the transaction date for legal compliance and dispute resolution purposes.
• Security Logs: Retained for 12 months to support security investigations if required.
• Marketing Data: Deleted within 30 days of you withdrawing your marketing consent.
• KYC Documents: Retained for 5 years following account closure, or longer if required by the relevant authorities.

Once the designated retention period expires, your personal data will be securely deleted or fully anonymised in accordance with strict data disposal procedures.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data held by idr89:

To exercise any of the above rights, please submit a written request to support@idr89.my by stating the right you wish to exercise and your account details. idr89 will process your request within 21 business days.

Idr89's services are strictly for individuals aged 18 and above. idr89 does not knowingly collect, process, or store any personal data from children or individuals under the age of 18.

Should we discover that data has been collected from a person under the age of 18, the account in question will be closed immediately and all associated data deleted within 48 hours. Any related deposits will be refunded via the original payment method.

The idr89 platform may contain links to third-party websites or services in certain contexts. idr89's Privacy Policy applies solely to the idr89 platform and does not cover the privacy practices of any third-party websites.

Idr89 is not responsible for the content, privacy policies, or security practices of third-party websites. We encourage players to review the privacy policy of each website they visit independently of idr89.

Idr89 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other operational reasons. Any material changes will be communicated to players via in-platform notifications or email.

The latest update date is always displayed at the top of this page. Continued use of the idr89 platform following any amendments constitutes your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or complaints regarding idr89's Privacy Policy or how we handle your personal data, please contact our Data Protection Officer via:

• Email: support@idr89.my (please state the subject as: "Privacy Complaint" or "Data Request")
• Live Chat: Available 24 hours a day, 7 days a week through the idr89 platform

Idr89 will acknowledge your complaint within 24 hours and provide a full response within 14 business days. If you are unsatisfied with our response, you have the right to file a complaint with Malaysia's Department of Personal Data Protection.