Privacy Policy visa89 — Malaysian Player Data Protection

visa89 ("we", "our platform") take the responsibility of protecting your personal data extremely seriously. This Privacy Policy explains in detail how we collect, use, process, store, and protect your personal information when you use the visa89 platform — including the website, mobile interface, and all related services we offer to players in Malaysia.

This Policy applies to all users who access or register an account at visa89, regardless of how they access the platform — whether through a web browser on a personal computer, an Android or iOS smartphone, or a tablet. By registering an account or continuing to use the platform, you agree to the collection and use of data as described in this Privacy Policy.

This Privacy Policy has been drafted in accordance with the requirements of Personal Data Protection Act 2010 (PDPA) Malaysia and encompasses the seven data protection principles set out in the Act: the general principle, the notice and choice principle, the disclosure principle, the security principle, the integrity principle, the access principle, and the data transfer limitation principle.

Visa89 only collects data that is necessary to operate the platform, meet legal obligations, and deliver the best possible user experience. Below is a complete table of the data we collect:

We do not collect sensitive data such as your medical information, religious beliefs, sexual orientation, or political views. Should we require any additional information not listed above for a specific purpose, we will provide a separate notice and seek your explicit consent before any collection takes place.

Your personal data is collected by visa89 through several key channels:

• Account Registration Process: When you complete the registration form at visa89, we collect the identity and contact information you provide directly. All required fields are clearly marked during the registration process.
• Financial Transactions: Every time you make a deposit using Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, or FPX via Maybank2u or CIMB Clicks, the transaction information required to process your payment is automatically recorded in our system.
• Gaming Activity: Every bet you place — whether at a live Baccarat table, a Roulette spin, a Blackjack game, slots, or a badminton or football wager — is recorded in your game log. These records are necessary to ensure fairness, resolve disputes, and meet regulatory requirements.
• Platform Usage: Our system automatically records certain technical information when you access the platform — including your IP address, browser type, device operating system, and navigation activity. This data is used solely for security purposes and technical improvements.
• Communications with Our Team: When you contact the visa89 support team via live chat, email, or WhatsApp, records of those communications are retained for quality control, staff training, and the resolution of any disputes that may arise later.
• Cookies and Tracking Technologies: As described in Section 9, visa89 uses cookies and similar technologies to enhance the user experience and analyse platform usage. You can manage your cookie settings through your web browser at any time.

visa89 uses collected personal data solely for the following purposes, all of which are necessary for the safe and effective operation of the platform:

• Account Management: Creating, verifying and managing your account, processing logins, managing security settings and ensuring that only you can access your own account.
• Transaction Processing: Processing all deposits and withdrawals in Malaysian Ringgit (MYR) accurately and securely, verifying your identity for large transactions and resolving any transaction disputes.
• Gaming Services Provision: Enabling you to access all games available on visa89, retain your game history, accurately calculate bonus balances and winnings, and ensure the integrity of every gaming session.
• Fraud Prevention and Security: Detecting and preventing fraudulent activity, money laundering, system abuse, and unauthorised access to your account. This includes real-time analysis of unusual transaction patterns and usage behaviour.
• Legal and Regulatory Compliance: To comply with Malaysian legal obligations, including Anti-Money Laundering (AML) requirements, Know Your Customer (KYC) requirements, and any reporting obligations imposed by regulatory authorities.
• Customer Support: Providing effective assistance when you contact our support team, resolving enquiries and complaints, and keeping track of your support cases.
• Platform Improvements: Analysing usage patterns to identify technical issues, understand the needs of Malaysian players, and make product improvement decisions driven by real data.
• Service Communications: Sending important account-related notifications, security updates, terms changes, and promotional information you have agreed to receive.

Visa89 does not use your data to make automated decisions that could materially affect your rights without human intervention. Any decision involving account suspension or bonus forfeiture is reviewed by a member of staff before being carried out.

Visa89 does not sell or disclose your personal data to third parties for commercial purposes. However, in the course of normal platform operations, your data may be shared with selected parties under limited and controlled circumstances:

• Licensed Payment Providers: To process your deposits and withdrawals, certain transaction information must be shared with Bank Negara Malaysia-licensed payment processors such as Touch 'n Go eWallet, GrabPay, DuitNow, and the FPX gateway. These providers are governed by their own privacy policies and security standards, as regulated by Bank Negara Malaysia.
• Platform Service Providers: Technical vendors that assist us in managing the platform infrastructure, including cloud hosting services and fraud detection software providers. All such vendors are bound by strict confidentiality agreements and are only permitted to use your data for purposes we specify.
• Game Providers: Internationally licensed game providers that supply live casino games, slots, and table games on the visa89 platform may receive session data required for game functionality. This data does not include your full identity information.
• Authorities and Regulatory Bodies: visa89 complies with all lawful directives from Malaysian authorities, including the Royal Malaysia Police, Bank Negara Malaysia, the Insolvency Department, and courts of competent jurisdiction. Your data will be disclosed where required by law or court order.

Protecting your personal data is our number one operational priority at visa89. We continually invest in the latest security infrastructure and apply a multi-layered security approach to keep your data protected at all times:

• Data Encryption in Transit: All communications between your device and visa89's servers are secured with TLS 1.3 protocol and 256-bit SSL encryption. This means your data cannot be intercepted or read by any third party while being transmitted over the internet.
• Data-at-Rest Encryption: Sensitive data stored in our databases — including financial and identity information — is encrypted using AES-256 algorithms while at rest (at-rest encryption).
• Strict Access Controls: Only authorised personnel with a legitimate business need may access your personal data. All access is logged and audited on a regular basis. The principle of least privilege is applied at every level.
• Two-Factor Authentication (2FA): 2FA verification is available for all visa89 accounts and is strongly encouraged for all members. Our internal systems that handle sensitive data require 2FA as a mandatory requirement for all staff.
• 24/7 Security Monitoring: An automated security monitoring system operates around the clock to detect unusual activity, unauthorised access attempts, or patterns that may indicate a potential security threat.
• Independent Security Audits: visa89 engages independent third parties to conduct regular penetration testing and security audits, ensuring our infrastructure consistently meets or exceeds industry standards.
• Incident Response Plan: We have a comprehensive security incident response procedure in place. In the event of a data breach that may affect your personal information, we are committed to notifying you and the relevant authorities within the timeframe prescribed by the PDPA.

While we take all reasonable steps to protect your data, no security system is completely foolproof. We encourage you to do your part by using a strong password, enabling 2FA, and never sharing your login credentials with anyone.

Visa89 does not retain your personal data for longer than necessary. Retention periods are determined based on the purpose of collection and applicable legal requirements:

• Active Account Data: For as long as your account remains active on the visa89 platform, your identity and contact data will be retained to enable us to provide services to you.
• Financial Transaction Records: In accordance with Malaysian legal requirements and AML compliance obligations, financial transaction records are retained for a minimum of 7 years from the date of the transaction, even after the account has been closed.
• Game Log: Gaming history and betting logs are retained for 3 years for dispute resolution and regulatory compliance purposes.
• Communication Data: Customer support conversation records are retained for 2 years from the date of communication for quality control and dispute resolution purposes.
• Security Log Data: Access logs and security logs are retained for 1 year for security investigation and fraud prevention purposes.
• After Account Closure: Once your account is closed, any personal data that does not need to be retained for legal purposes will be deleted or anonymised within 90 days.

Under Malaysia's Personal Data Protection Act 2010 and visa89's commitment to transparency, you have the following rights regarding the personal data we hold about you:

Visa89 uses cookies and similar tracking technologies to enhance your experience on the platform. The following are the types of cookies we use: