Privacy Policy visa89 – Personal Data Protection for Malaysian Players

This Privacy Policy explains how visa89 ("we", "platform", "visa89") collects, uses, stores, and protects your personal information when you use our website and services at visa89.site. This Policy applies to all registered players and visitors to our website.

Visa89 is committed to protecting the privacy of every Malaysian player who trusts our platform. We understand that your personal information is sensitive, and we take this responsibility seriously. This policy is written in plain, straightforward language — not confusing legal jargon — so you truly know what happens with your data.

By registering an account or using any visa89 service, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree with any part of this policy, please stop using the platform and contact us to close your account.

Visa89 collects several categories of personal information when you use our platform. We only collect data that is genuinely necessary for the stated purposes — we do not gather data for the sake of it.

Visa89 not collect credit or debit card numbers directly — all financial transactions are processed through licensed third-party payment providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX, each with their own privacy and security policies.

We also automatically collect technical data when you visit our website, including IP address, device type, operating system, and navigation patterns. This data is collected for security purposes, fraud detection, and improving the user experience.

Visa89 uses your personal information for the following purposes, all of which are necessary to operate the platform safely and efficiently:

• Account management: Creating, maintaining, and securing your visa89 account. This includes identity verification, login management, and handling account-related requests.
• Transaction processing: Processing deposits and withdrawals via supported Malaysian payment methods — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX. Your financial information is used solely for this purpose.
• Fraud detection & security: Identifying and preventing fraudulent activity, money laundering, account breaches, and unauthorised use. These are legal obligations we fully comply with.
• Legal compliance: Fulfilling applicable legal obligations including KYC (Know Your Customer), AML (Anti-Money Laundering) requirements, and reporting to relevant authorities when required by law.
• Customer support: Helping you resolve technical issues, account enquiries, and game-related concerns. Communication records are retained for training and service improvement purposes.
• Platform improvements: Analysing usage patterns in aggregate and anonymised form to understand how players use visa89, and to improve the user experience, interface, and game library.
• Service communications: Sending you important account notifications, policy changes, security updates, and transaction information you need to know about.
• Marketing (with your consent): Sending promotional information and bonus offers only if you have consented to receive them. You may withdraw this consent at any time.

Visa89 does not sell, rent, or transfer your personal data to third parties for their own marketing purposes. This is an absolute, unwavering commitment.

There are limited situations in which we may share your data with third parties, and all of them serve legitimate operational purposes:

• Payment provider: Transaction information required to process your deposits and withdrawals is shared with licensed payment providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX banks. This sharing is kept to the minimum technically necessary.
• Technical service providers: Selected game providers may receive the minimum session data required to operate the games. All such providers are bound by strict confidentiality agreements.
• Legal authorities: visa89 will disclose player data to the relevant authorities when required by Malaysian law or a valid court order. We have no discretion in such situations, but we will only provide the minimum data necessary.
• Fraud prevention: In cases of suspected fraud or illegal activity, we may share the necessary information with relevant law enforcement agencies or regulatory bodies.

In all of the sharing scenarios above, visa89 ensures that recipients are bound by confidentiality and security obligations equivalent to or higher than our own standards.

Protecting your personal data is one of the most important responsibilities we carry as a platform you trust. The following are the concrete security measures we have implemented at visa89:

• Encryption in transit: All communications between your device and visa89 servers are protected by TLS 1.3 with 256-bit SSL encryption — the same standard used by leading financial institutions.
• Stored data encryption: Sensitive data in our database — including personal and financial information — is encrypted using AES-256.
• Tiered access controls: A role-based access control (RBAC) system ensures that staff can only access data required for their specific tasks.
• 24/7 Monitoring: Our continuous security monitoring system detects suspicious activity and intrusion attempts in real time.
• Regular security audits: visa89 conducts regular penetration testing and independent security audits to identify and address potential vulnerabilities.
• Secure password management: Player passwords are stored using a salted one-way hash — we cannot view your original password ourselves.
• Two-factor authentication (2FA): We encourage all players to enable two-factor authentication in their account settings for an added layer of protection.

While we take all reasonable steps to protect your data, no security system is one hundred percent foolproof. In the event of a data breach affecting your personal information, visa89 is committed to notifying you in a timely manner in accordance with applicable legal requirements.

Visa89 uses cookies and similar tracking technologies to enhance your experience on our platform. Below are the types of cookies we use:

• Essential cookies: Required for core platform functionality, including maintaining your login session, remembering account settings, and ensuring security features work correctly. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Helping us understand how players use the platform — which pages are visited most, where players spend their time, and where technical issues arise. This data is collected in aggregate and anonymised form.
• Functional cookies: Remembering your preferences — such as language, default bet size, and favourite games — so you do not have to reconfigure them every time you log in.

You can manage your cookie preferences through your web browser settings. Disabling certain cookies may affect some features on the visa89 platform, but we will always do our best to keep core functionality working.

Visa89 retains your personal data only for as long as necessary for the purpose it was collected, or as required by applicable law. The following are our general data retention guidelines:

• Active account data: Retained for as long as your visa89 account remains active.
• Financial transaction records: Retained for a minimum of 7 years in accordance with applicable Malaysian financial and tax legislation.
• Support communication records: Retained for 2 years from the date of communication for reference and dispute resolution purposes.
• Security logs: Retained for 12 months to assist in the detection and investigation of security incidents.
• Closed account data: After account closure, your personal data will be deleted or anonymised within 90 days, unless there is a legal requirement to retain it for longer.

When data is no longer needed and there is no legal obligation to retain it, visa89 will securely delete it using data erasure methods that ensure it cannot be recovered.

As a visa89 player and data subject under Malaysia's PDPA, you have important rights regarding your personal data. We respect and facilitate the exercise of all these rights:

Financial data processing at visa89 is subject to a higher level of protection given its sensitivity. When you make a deposit using Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX via Maybank2u or CIMB Clicks, the transaction is processed directly by the respective licensed payment provider — visa89 never stores your full e-wallet account details or bank account number in our systems.

What we retain are transaction records — the amount, date, time, transaction status, and the transaction identifier issued by the payment provider. These are necessary for accounting purposes, dispute resolution, and financial regulatory compliance.

For withdrawals exceeding MYR 10,000, visa89 may be required to carry out additional identity verification checks in accordance with anti-money laundering legislation. As part of this process, we may request supporting documents such as a copy of your MyKad or bank statement. These documents are used solely for verification purposes and are protected to the same security standard as all other data.

Visa89 is a platform that for individuals aged 18 and above only. We do not knowingly collect or process personal data from individuals under the age of 18.

If we discover that we have collected personal data from someone under the age of 18, we will take immediate steps to delete that data and close the account in question. If you believe a minor has registered on our platform without parental or guardian consent, please contact us immediately at support@visa89.site so we can take the appropriate action.

Visa89 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, updates to applicable laws, or improvements to how we protect your data. When material changes are made:

• The "Last Updated" date at the top of this page will be revised accordingly.
• A notification will be displayed within the platform to all logged-in players.
• For significant changes, an email notification will be sent to all active members.

We encourage you to review this Privacy Policy page periodically. Continued use of the visa89 platform after the effective date of an updated policy constitutes acceptance of those changes. If you do not agree with the changes, you have the right to close your account and withdraw your balance.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please reach out to us through the following channels:

• Email: support@visa89.site — for privacy-related enquiries, please use "Data Privacy Enquiry" as your email subject line.
• Live Chat 24/7: Available on the visa89 platform for immediate response.
• WhatsApp Support: Response within 5 minutes during 24/7 operating hours.

We aim to respond to all privacy-related enquiries within 5 business days. For requests involving formal data rights such as access, correction, or deletion, the full process may take up to 30 days depending on the complexity of the request.