t789 Privacy Policy

1Introduction

This Privacy Policy is issued by t789, the operator of the online gaming and sports betting platform accessible at https://t789.casa (hereinafter referred to as "t789", "the Company", "we", "us", or "our"). It governs the collection, processing, storage, and disclosure of personal data relating to individuals who access or use the t789 platform (hereinafter referred to as "you", "the Player", or "the User").

t789 is committed to processing personal data in a lawful, fair, and transparent manner, in accordance with applicable data protection legislation and international best practices. This Policy describes your rights in relation to your personal data and how you may exercise them.

By accessing the t789 platform or registering an account, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions, which govern your use of the platform as a whole.

2Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" — Any information that identifies or could reasonably identify a living individual, either directly or in combination with other information held by t789.
• "Processing" — Any operation or set of operations performed on personal data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — t789, the entity that determines the purposes and means of processing personal data.
• "Data Processor" — A third party that processes personal data on behalf of t789, under contractual obligation and subject to t789's instructions.
• "Consent" — A freely given, specific, informed, and unambiguous indication of the Player's agreement to the processing of their personal data for a stated purpose.
• "KYC Data" — Identity verification documentation collected to comply with Know Your Customer obligations, including identification documents, proof of address, and payment method verification.
• "Cookies" — Small text files placed on a user's device by a website to store session information, preferences, and usage analytics.
• "Sensitive Data" — A sub-category of personal data requiring enhanced protection, including financial account details and government-issued identity documents.

3Personal Data We Collect

t789 collects personal data that is necessary and proportionate for the purposes described in Section 5 of this Policy. The categories of personal data we collect include:

t789 does not collect or process special categories of personal data (such as racial or ethnic origin, religious beliefs, or health data) except where strictly required by applicable responsible gambling regulations (e.g., self-exclusion records maintained for player protection purposes).

4How We Collect Your Data

4.1 Directly From You

The majority of personal data t789 holds is provided directly by you during: account registration; KYC verification submissions; deposit and withdrawal transactions; completion of responsible gambling preference forms; communications with our customer support team via live chat or email; and responses to promotional surveys or competitions.

4.2 Automatically Through Platform Use

When you access the t789 platform, certain technical data is collected automatically through server logs, cookies, and similar technologies. This includes your IP address, device identifiers, browser information, and session activity data. This data is collected to ensure platform security, detect fraud, and maintain service quality.

4.3 From Third-Party Sources

In limited circumstances, t789 may receive personal data about you from trusted third parties, including:

• Payment service providers (e.g., FPX, Touch 'n Go eWallet, DuitNow, Boost, Maybank, CIMB, Public Bank) for transaction verification purposes
• Identity verification and fraud prevention services engaged to support our KYC obligations
• Analytics service providers who supply aggregated, anonymised platform usage data

t789 ensures that any third party sharing personal data with us does so lawfully and with an appropriate basis for such disclosure.

5Purpose & Legal Basis for Processing

t789 processes personal data only where there is a lawful basis to do so. The primary purposes for which we process your data, and the corresponding legal basis for each, are set out below:

• Account creation and management — Processing is necessary for the performance of the contract between t789 and the Player.
• Identity verification (KYC) — Processing is required to comply with legal obligations relating to anti-money laundering (AML) and age verification.
• Processing deposits and withdrawals — Necessary for performance of the contract and compliance with financial regulations applicable to payment processing.
• Fraud prevention and platform security — Processing is in the legitimate interests of t789 and its players to maintain a safe and secure gaming environment.
• Responsible gambling monitoring — Processing is required by applicable regulations and in the vital interests of players to prevent gambling-related harm.
• Customer support communications — Necessary for the performance of the contract and to resolve disputes in the legitimate interests of both parties.
• Promotional communications — Based on your explicit consent where you have opted in to receive marketing materials. You may withdraw consent at any time.
• Platform analytics and improvement — Processing is in t789's legitimate interests to improve service quality, provided such interests are not overridden by your fundamental rights and freedoms.

6Data Sharing & Disclosure

6.1 Third-Party Service Providers

t789 engages carefully selected third-party service providers (Data Processors) who process personal data solely on t789's behalf and under strict contractual obligations. These providers are engaged for the following categories of services:

• Payment processing (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX via Maybank, CIMB, Public Bank, Hong Leong Bank, Visa, Mastercard, and cryptocurrency providers)
• Identity verification and anti-money laundering (AML) screening services
• Cloud hosting and data centre infrastructure
• Fraud detection and cybersecurity services
• Customer support platform providers
• Platform analytics tools (anonymised and aggregated data only)

All third-party processors are bound by data processing agreements that prohibit them from using your personal data for their own purposes or disclosing it to any other party.

6.2 Legal Disclosure

t789 may disclose personal data to governmental authorities, regulators, or law enforcement agencies where required to do so by applicable law, court order, or regulatory directive. Such disclosures will be limited to the minimum information necessary to comply with the relevant legal obligation.

6.3 No Commercial Data Sharing

7International Data Transfers

t789 operates in the international online gaming environment, and certain data processing activities may involve the transfer of personal data to servers, processors, or service providers located outside Malaysia. Where such transfers occur, t789 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that applicable within Malaysia, including:

• Contractual data transfer clauses that bind the recipient to equivalent data protection standards
• Selection of processors operating within jurisdictions that provide adequate data protection under international standards
• Technical and organisational security measures equivalent to those applied to data held domestically

Players based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and across Malaysia may request information regarding the specific safeguards applicable to any international transfer of their data by contacting the t789 support team.

8Data Retention

t789 retains personal data for no longer than is necessary for the purpose for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of the active account relationship, plus a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with applicable financial regulations.
• Gaming activity logs: Retained for three (3) years from the date of the relevant session, or longer if required for dispute resolution or regulatory purposes.
• Customer support communications: Retained for two (2) years from the date of the last communication in a support thread, unless the matter remains subject to an open dispute or investigation.
• Marketing preference records: Retained until you withdraw consent or request erasure, subject to any overriding legal obligation to retain the record of consent itself.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with t789's data destruction procedures.

9Cookies & Tracking Technologies

9.1 What Are Cookies?

Cookies are small data files stored on your device when you visit a website. They serve a variety of functions, from maintaining your session state to remembering your preferences and providing platform analytics.

9.2 Cookies Used by t789

t789 uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the platform to function. These maintain your login session, remember your language and currency preferences, and enable core security features. These cookies cannot be disabled without significantly impairing platform functionality.
• Functional Cookies: Allow t789 to remember choices you make (such as your preferred payment method display or game lobby view) to provide an enhanced, more personalised experience.
• Analytics Cookies: Collect anonymised, aggregated information about how visitors use the t789 platform — including which pages are visited most frequently and where users navigate from. This data is used solely to improve platform performance and user experience.
• Security Cookies: Support fraud detection and prevention, helping t789 identify unusual access patterns, multiple account activity, or automated bot behaviour.

9.3 Managing Cookies

You may configure your browser settings to refuse or delete cookies. Please note that disabling strictly necessary cookies will impair your ability to use the t789 platform. Disabling analytics or functional cookies will not prevent you from accessing the platform but may reduce the personalisation of your experience.

10Security Measures

t789 implements a comprehensive range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and t789's platform is encrypted using 256-bit TLS encryption, ensuring that data cannot be intercepted in transit.
• Data Encryption at Rest: Sensitive personal data stored on t789's systems — including financial data and identity documents — is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data within t789's organisation is restricted to authorised personnel on a strict need-to-know basis. All access is logged and audited.
• Fraud Monitoring: Real-time monitoring systems analyse platform activity to detect and respond to suspicious behaviour, including multiple account creation, unusual transaction patterns, and automated access attempts.
• Penetration Testing: t789's platform infrastructure undergoes periodic security assessments and penetration testing by qualified security professionals to identify and remediate vulnerabilities.
• Incident Response: t789 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to affected individuals, t789 will notify relevant parties in accordance with applicable legal obligations.

11Your Data Rights

Subject to applicable legal exceptions and regulatory obligations, you have the following rights in relation to the personal data t789 holds about you:

• Right of Access: You may request a copy of the personal data t789 holds about you, together with information about how and why it is being processed.
• Right to Rectification: You may request that inaccurate or incomplete personal data held about you be corrected or completed without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent, or where processing is unlawful — subject to overriding legal retention obligations.
• Right to Restriction of Processing: You may request that t789 restricts the processing of your data in certain circumstances, such as while the accuracy of the data is contested.
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you may request that your personal data be provided to you in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing of your personal data carried out on the basis of legitimate interests, or for direct marketing purposes. Where you object to direct marketing, processing for that purpose will cease immediately.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

12Children & Minors

The t789 platform is strictly restricted to individuals aged 21 years and above. t789 does not knowingly collect, process, or retain personal data relating to individuals under the age of 21. Age verification is an integral part of the account registration and KYC processes.

Parents or guardians who believe that a minor may have created an account on t789 should contact our support team immediately at [email protected]. t789 takes such reports seriously and will respond with urgency.

13Amendments to This Policy

t789 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legislation, or regulatory requirements. The effective date at the top of this page will be updated accordingly whenever a revision is made.

Where changes are material in nature — for example, changes to the purposes for which we process your data or the introduction of new categories of data sharing — t789 will provide prominent notice to registered players via account email or an in-platform notification prior to the changes taking effect.

Your continued use of the t789 platform following the effective date of any revised Privacy Policy constitutes your acknowledgement and acceptance of the updated terms. If you do not agree with any amendment, you should cease using the platform and may request account closure in accordance with our Terms & Conditions.

14Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or t789's data processing practices, please contact our support team using the details below:

For questions specifically related to our responsible gambling practices and self-exclusion tools, please visit our Responsible Gambling page. For general information about the t789 platform and our mission for Malaysian players, visit our About Us page.