Idr89 Privacy Policy — Personal Data and Information Protection

Welcome to the idr89 Privacy Policy. This document constitutes a data protection agreement between you as the user and idr89 as the platform operator. We at idr89 understand that trust is the foundation of our relationship with every member, and that trust begins with full transparency about how we handle your personal information.

This Privacy Policy applies to all services offered by idr89 through the website idr89.onl, the idr89 mobile app, and any other service channels operating under the idr89 brand. This covers all information you provide directly to us, information we collect automatically when you use the platform, and information we receive from legitimate third-party sources.

By registering and using idr89 services, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy. If you do not agree with any part of this policy, we encourage you to contact our support team for further clarification before continuing to use the platform.

Idr89 collects several categories of information for different purposes. We only collect information that is strictly necessary to provide high-quality services and ensure platform security for all users.

A. Information You Provide Directly

• Registration Information: Full name, date of birth, email address, mobile number, and password.
• Identity Verification Information (KYC): Copy of national identity card, passport, or other official identification document; proof of address such as a utility bill or recent bank statement.
• Financial Information: Bank account details, e-wallet information (Touch 'n Go, Boost, GrabPay), and deposit and withdrawal transaction history.
• Communications: Content of conversations with our customer support team via Live Chat or email.

B. Information Collected Automatically

• Technical Data: IP address, browser type and version, operating system, screen resolution, and device information.
• Usage Data: Pages visited, session duration, games played, total wagering, and general usage patterns.
• Location Data: Approximate geographic location based on IP address for compliance and fraud prevention purposes.
• Cookie Data: Information stored via cookies and similar tracking technologies — further details are provided in Section 5.

Every piece of information we collect is used for clear and legitimate purposes. idr89 will not use your data for any purpose not stated in this policy without obtaining your consent first.

• Account Management: Creating, verifying, and maintaining your member account; securely processing deposits and withdrawals; and resolving any reported account issues.
• Legal Compliance: Fulfilling our obligations under anti-money laundering (AML) laws, Know Your Customer (KYC) requirements, and reporting to the relevant authorities when required by law.
• Security and Fraud Prevention: Detecting and preventing fraudulent activity, account abuse, unauthorized access, and attempts to hack or manipulate the system.
• Personalise Your Experience: Personalizing content, game recommendations, and promotional offers based on your preferences and usage history.
• Service Communications: Sending important notifications related to your account, policy updates, security information, and responses to your support inquiries.
• Responsible Gaming: Monitoring betting patterns to detect signs of problem gambling and providing appropriate intervention or support when needed.
• Service Improvement: Analyzing aggregated and anonymized usage data to improve platform performance, user experience, and our games portfolio.

Idr89 takes a highly cautious approach to data sharing. We do not sell your personal information and only share data under limited, transparent circumstances as outlined below:

• Third-Party Service Providers: We share only the necessary data with our payment processing partners (such as DuitNow, FPX), game providers, and technical infrastructure providers. All third parties are bound by strict confidentiality agreements and may only use the data for specified purposes.
• Legal Authorities: idr89 will disclose information to the relevant authorities when required to do so by law, court order, or in the context of a legitimate criminal investigation.
• Fraud Prevention: In specific cases, we may share information with fraud prevention agencies or other gaming platforms to prevent individuals engaged in fraudulent activity.
• Business Transfers: Should idr89 be involved in any acquisition, merger, or asset transfer, user data may be transferred as part of that transaction. You will be notified in advance of any change in data controller.

Idr89 uses cookies and similar technologies to enhance your user experience, analyse platform performance, and personalise the content you see. Cookies are small text files stored on your device by your web browser when you visit the idr89 site.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as secure login, session management, and security. These cookies cannot be disabled as they are essential to the operation of the site.
• Performance Cookies: Collecting anonymous information about how visitors use our site — most frequently visited pages, error messages, and more. This data helps us improve how the website functions.
• Functional Cookies: Allowing the website to remember your preferences such as language, region, and display settings to provide a more personalized experience.
• Analytics Cookies: Helping us understand how users interact with our platform in aggregate for continuous improvement purposes.

You can control and manage cookies through your web browser settings. However, disabling essential cookies may affect platform functionality and your login experience. For more information on managing cookies, please refer to your web browser's help documentation.

The security of your data is idr89's highest priority. We continuously invest in the latest security infrastructure to ensure your information is always protected from unauthorized access, loss, or damage.

Key security measures we implement include:

• End-to-End Encryption: All communications between your device and idr89's servers are secured with TLS 1.3 protocol and AES-256 encryption, ensuring your data cannot be intercepted during transmission.
• Layered Access Controls: Access to user data is restricted to staff who require it to perform their duties, and all access is logged and monitored.
• 24/7 Monitoring: Our security monitoring system operates around the clock to detect and respond to any threats or suspicious activity in real time.
• Regular Security Audits: idr89 conducts regular internal and external security audits to identify and address any vulnerabilities in our systems.
• Two-Factor Authentication: You are encouraged to enable 2FA on your account as an additional layer of protection against unauthorized access.
• Backup and Recovery: Your data is automatically and regularly backed up to a secure, separate location, ensuring service continuity even in the event of a technical disruption.

Idr89 only retains your personal information for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable laws and regulations.

• Active Account Data: For as long as your account is active and you continue to use idr89 services, we will retain your profile information and transaction history.
• Data After Account Closure: After your account is closed, we may retain certain information for the period required by law — typically between 5 and 7 years — for legal compliance, dispute resolution, and fraud prevention purposes.
• Security Logs: Access and security logs are retained for 12 months for security investigation and audit purposes.
• KYC Records: Identity verification documents are retained in accordance with anti-money laundering legal requirements, which may require storage for up to 7 years.
• Responsible Gaming Data: Records related to self-exclusion or betting limits are retained for a longer period to ensure the ongoing safety of the members involved.

When the retention period expires or you submit an eligible data deletion request, idr89 will securely delete or anonymize your data using industry-standard methods.

Idr89 respects your rights as a data owner. The following are your rights regarding the personal information we hold about you:

• Right of Access: You have the right to request a copy of all personal information we hold about you. This request will be processed within 30 business days.
• Right to Rectification: If any information we hold about you is inaccurate or out of date, you have the right to request an immediate correction.
• Right to Erasure: In certain circumstances, you have the right to request that your data be deleted. However, this right is subject to our retention obligations under applicable laws.
• Right to Restrict Processing: You may request to restrict how we use your data while any dispute is being resolved.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time.
• Right to Data Portability: You may request to receive your data in a machine-readable format for the purpose of transferring it to another platform.
• Right to Withdraw Consent: Where the processing of your data is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.

Idr89 takes child protection very seriously. Our platform is not intended for individuals under the age of 18, and we do not knowingly collect or process personal information from minors.

All prospective members are required to confirm they are at least 18 years of age during the registration process. idr89 employs age verification technology and comprehensive KYC procedures to ensure compliance with this age requirement.

If we determine that information has been collected from a person under the age of 18, we will take the following actions immediately:

• Closing the relevant account immediately.
• Deleting all related information from our systems.
• Reporting the incident to the relevant authorities if required.

Idr89 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements in how we handle data. The "Last Updated" date at the top of this page indicates when this policy was last reviewed.

If we make material changes to this Privacy Policy, we will notify you through one of the following methods:

• Notification email to your registered email address.
• A clear notice on the homepage or account section of the idr89 website.
• In-app notifications on the idr89 mobile app when you open the app.

Your continued use of the idr89 platform after any Privacy Policy changes take effect constitutes your acceptance of the updated terms. We encourage you to review this page periodically to stay informed about how we protect your information.