Depo89 Privacy Policy — Malaysian Player Data Protection

This Privacy Policy describes how depo89 ("we", "platform", "depo89") collects, uses, processes, stores, and protects your personal data as a registered user or player on our online casino and Sports Betting platform. This document forms part of the agreement between you and depo89 and should be read together with our Terms and Conditions.

Your privacy is our priority. We understand that your trust in depo89 depends on how responsibly we handle your personal information. To that end, we have established strict and transparent policies to ensure your data remains secure and is used only for legitimate purposes.

This depo89 Privacy Policy applies to all users who access or use the depo89 platform via our website, mobile app, or any other digital channel we provide. By registering an account or using depo89's services, you agree to the collection and use of your information as described in this policy.

This policy covers all aspects of personal data management, including collection, storage, processing, sharing, and deletion. We encourage you to read this document in full and to contact us if any section is unclear or requires further clarification.

• This Policy applies to all registered players on the depo89 platform regardless of the access method used.
• This policy is subject to applicable data protection laws, including Malaysia's Personal Data Protection Act (PDPA) 2010.
• Any third-party services linked on our platform have their own separate privacy policies.
• Continued use of the platform following any amendment to this Privacy Policy will be considered your acceptance of the changes.

Depo89 collects your personal information only when necessary to provide a safe, fair, and responsible service. Below are the categories of data we collect and the purpose of each:

We also collect data automatically when you visit the depo89 platform, including information about your device, language settings, time zone, and usage patterns. This data helps us provide a better and safer experience for all Malaysian players.

Depo89 uses collected personal data solely for legitimate, stated purposes. We do not process your data for any purpose beyond the scope described in this Privacy Policy without first obtaining your consent.

• Account Management: Creating and maintaining your player account, including the registration process, login, and KYC identity verification.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as withdrawals to your account.
• Platform Security: Detecting and preventing fraudulent activity, money laundering, unauthorised access, and bonus abuse.
• Customer Support: Providing technical and financial support, as well as resolving complaints or disputes related to accounts and transactions.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and to support players' self-management tools.
• Legal Compliance: Fulfilling legal obligations, including KYC/AML (Anti-Money Laundering) reporting requirements to the relevant authorities.
• Platform Improvements: Analysing aggregated usage data (without identifying individuals) to improve platform performance, interface, and player experience.
• Marketing Communications: Sending promotional information, bonuses, and platform updates — only if you have opted in to receive such communications.

You may opt out of marketing communications at any time by updating your notification preferences in your account settings or by contacting the depo89 support team. Unsubscribing from marketing will not affect essential service communications such as transaction notifications and account security alerts.

Depo89 does not sell or rent your personal data to any third party. However, there are certain circumstances where we may need to share your information with others for legitimate purposes:

• Service Providers: We share the necessary data with payment providers (such as FPX, Touch 'n Go, and GrabPay gateways), licensed game providers, and server hosting companies — all bound by strict confidentiality agreements.
• Regulatory Authorities: We may be required to disclose your data to government authorities, law enforcement agencies, or regulatory bodies as mandated by Malaysian law or court order.
• Fraud Prevention: In cases of suspected fraud, money laundering, or criminal activity, relevant information may be shared with the appropriate authorities for investigation purposes.
• Business Transfer: In the event of a merger, acquisition, or business asset transfer, player data may be transferred as part of that transaction — you will be notified in advance.

Depo89 implements multiple layers of technical and organisational safeguards to protect your personal data from unauthorised access, loss, misuse, or accidental disclosure.

• SSL/TLS Encryption: All communications between your browser and depo89's servers are protected with 256-bit SSL encryption — the padlock icon in your browser's address bar confirms this secure connection.
• Secure Infrastructure: depo89's servers are protected by enterprise-grade firewalls, intrusion detection systems (IDS), and round-the-clock continuous threat monitoring.
• Internal Access Controls: Only specifically authorised staff may access player data, and all access is logged for security audit purposes.
• Two-Factor Authentication (2FA): we offer 2FA for player accounts to add an extra layer of protection against unauthorised access.
• Regular Security Audits: depo89 conducts regular penetration testing and security audits by independent third parties to identify and address any vulnerabilities.
• Data Backups: Your data is regularly backed up to a separate, secure location to ensure service continuity under all circumstances.

While we take all reasonable steps to protect your data, no security system in the world is entirely foolproof. In the event of a data breach affecting your personal information, depo89 is committed to notifying you in a timely manner in accordance with applicable legal requirements.

Depo89 uses cookies and similar tracking technologies to enhance the user experience, analyse platform traffic, and tailor content to your preferences. Cookies are small text files stored on your device when you visit our platform.

• Essential Cookies: Required for core platform functions such as login session authentication, account security, and language preferences. These cookies cannot be disabled.
• Performance Cookies: Collecting information about how you use the platform (pages visited, time spent, errors encountered) to help us improve our services.
• Functional Cookies: Storing your preferences such as display settings, language, and geographic location to deliver a more personalised experience.
• Analytics Cookies: We use analytics tools to understand aggregated usage patterns — this data does not identify you as an individual.

You can manage and delete cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the depo89 platform. Most modern browsers allow you to view, manage, and delete cookies from the settings or privacy menu.

As a depo89 player, you have certain rights regarding your personal data that we fully respect. The following rights may be exercised at any time:

Depo89 retains your personal data only for as long as necessary to fulfil the original purpose of collection, or as required by applicable law. Once the retention period expires, your data will be securely deleted or anonymised.

• Active Account Data: Retained for the duration your account remains active on the depo89 platform and for 5 years following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian tax legislation and financial reporting requirements.
• KYC Records: Retained for a minimum of 6 years following the end of the business relationship, in accordance with AML (Anti-Money Laundering) legal requirements.
• Security Logs: Retained for 12 months for fraud detection and security incident investigation purposes.
• Support Communications: Customer support conversation records are retained for 2 years for reference and dispute resolution purposes.
• Marketing Data: Deleted immediately upon your opt-out from receiving marketing communications from us.

Depo89 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements to how we protect your data. We will notify you of any material changes via platform notification or email at least 7 days before the changes take effect.

• The "Updated" date at the top of this page will always reflect the latest version of the Privacy Policy.
• For minor changes that do not affect your fundamental rights, we may not send a separate notification.
• Your continued use of the depo89 platform after a policy change takes effect will be considered your acceptance of the updated Privacy Policy.
• If you do not agree with any changes made, you have the right to close your account and request deletion of your data.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we manage your personal data, please reach out to us through the following channels. The depo89 Data Protection Team is ready to assist you in Bahasa Malaysia.