Privacy Policy

This Privacy Policy ("Policy") is issued by depo89 ("depo89", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at depo89.click ("Platform"). This Policy sets out in full detail how we collect, use, store, disclose, and protect the personal data of individuals ("you", "your", "User") who access or use our Platform, including players located across Malaysia — in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and elsewhere.

depo89 takes the privacy of its users seriously. We are committed to handling your personal data with care, transparency, and integrity. This Policy is designed to give you a clear and complete picture of our data practices so that you can make an informed decision about using our services.

By registering an account, logging in, or otherwise accessing any part of the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. This Policy should be read in conjunction with our Terms & Conditions, which govern the overall use of the Platform.

The following terms carry the meanings assigned to them below throughout this Policy:

depo89 collects the following categories of personal data in the course of providing and operating the Platform:

3.1 Identity & Contact Data

• Full legal name;
• Date of birth (required for 21+ age verification);
• Nationality and country of residence;
• Government-issued identification number (e.g., Malaysian MyKad number or passport number);
• Residential address;
• Email address;
• Mobile phone number.

3.2 Financial & Payment Data

• Bank account details or e-wallet identifiers used for deposit and withdrawal transactions (e.g., Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay);
• Cryptocurrency wallet addresses (where applicable for USDT or BTC transactions);
• Transaction history, including deposit amounts in MYR, withdrawal amounts in MYR, and timestamps;
• Payment verification documents submitted during KYC review.

3.3 Account & Gaming Activity Data

• Username and encrypted password;
• Account registration date and history of Account status changes;
• Betting history, game play records, session durations, and wagering patterns;
• Bonus and promotion usage records;
• Responsible gambling tool settings (deposit limits, self-exclusion status, cool-off periods).

3.4 Technical & Device Data

• IP address and approximate geolocation;
• Device type, operating system, and browser version;
• Pages visited, time spent on each page, and navigation paths within the Platform;
• Cookie identifiers and session tokens.

3.5 Communications Data

• Records of communications with our customer support team, including live chat transcripts and email correspondence;
• Feedback, survey responses, and complaint records.

We collect personal data through the following means:

• Direct submission: Information you provide when registering an Account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotion;
• Automated technologies: Cookies, web beacons, server logs, and analytics tools that collect technical and behavioural data as you navigate the Platform;
• Third-party service providers: Payment processors, identity verification services, and fraud detection partners may share data with us in the course of facilitating your transactions or verifying your identity;
• Publicly available sources: In limited circumstances, we may verify information you provide against publicly available records for compliance purposes.

We process your personal data only where we have a valid legal basis to do so. The table below sets out the primary processing activities and the corresponding legal basis for each:

depo89 uses the personal data it collects for the following purposes:

• To create, maintain, and administer your Account on the Platform;
• To process deposits and withdrawals using your chosen Malaysian payment method or cryptocurrency channel;
• To verify your identity and age in accordance with our legal and contractual obligations;
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activity;
• To monitor gaming behaviour for the purpose of enforcing responsible gambling obligations and identifying at-risk players;
• To provide customer support and resolve disputes or complaints;
• To send you service-related communications (e.g., Account notifications, security alerts, policy updates) — these communications cannot be opted out of while your Account remains active;
• To send you marketing and promotional communications, where you have provided consent to receive such communications — you may withdraw this consent at any time;
• To improve Platform features, user experience, and operational performance using aggregated or anonymised analytics data;
• To comply with applicable legal requirements, regulatory requests, and court orders.

depo89 does not sell, rent, or trade your personal data to third-party advertisers or marketing companies. We may share your personal data with the following categories of recipients only where necessary and only to the extent required:

• Payment service providers: Malaysian payment processors including DuitNow operators, FPX network participants, Touch 'n Go eWallet, Boost, GrabPay, and banking partners such as Maybank, CIMB, Public Bank, and Hong Leong, as required to facilitate your transactions;
• Identity verification and KYC providers: Third-party services engaged to verify your identity and age as required by our operating obligations;
• Fraud detection and AML compliance partners: Specialist services that assist us in identifying and preventing financial crime;
• Game content providers: In limited technical circumstances, anonymised session data may be processed by licensed game providers to facilitate game delivery and RNG operation;
• Legal and regulatory authorities: Where required by law, court order, or competent regulatory authority, we may disclose your personal data without prior notice to you;
• Professional advisors: Legal counsel, auditors, and compliance consultants, subject to strict confidentiality obligations.

All third parties with whom we share personal data are required to process such data in accordance with applicable data protection obligations and solely for the purposes specified by depo89.

depo89 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or for as long as we are required to retain it under applicable legal or regulatory obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

The Platform uses cookies and similar tracking technologies to deliver, maintain, and improve our services. A cookie is a small text file stored on your device when you visit a website. We use the following categories of cookies:

You can manage or delete cookies through your browser settings. Please note that disabling functional or analytics cookies may affect the quality of your experience on the Platform. Disabling strictly necessary or fraud detection cookies may prevent you from using certain features or accessing your Account securely.

We do not use third-party advertising cookies or tracking technologies that build profiles for cross-site advertising purposes.

depo89 implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers;
• Encrypted storage of sensitive data at rest, including password hashes and financial details;
• Multi-factor authentication options for User Accounts;
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis;
• Real-time fraud detection and anomaly monitoring systems;
• Regular security audits and vulnerability assessments of our platform infrastructure;
• Staff training on data protection obligations and information security best practices.

Notwithstanding these measures, no data transmission over the internet or electronic storage system is entirely secure. While we take every reasonable precaution, we cannot guarantee the absolute security of your data. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected Users in accordance with applicable legal requirements.

Subject to applicable law, you have the following rights in relation to the personal data depo89 holds about you:

To exercise any of the above rights, please contact us at [email protected] (plain text — not a link). We may need to verify your identity before processing your request. We will respond within a reasonable timeframe and, where legally required, within the statutory period applicable under applicable law.

The Platform is strictly intended for individuals who are 21 years of age or older. depo89 does not knowingly collect personal data from persons under the age of 21. Where we have reason to believe that personal data has been submitted by or on behalf of a person under 21, we will take immediate steps to:

• Suspend or close the relevant Account;
• Return any deposited funds to the originating payment method;
• Delete all personal data associated with the underage individual as soon as practicable, subject to any conflicting legal retention obligations.

If you believe that a minor has accessed or registered on the Platform, please notify us immediately at [email protected] (plain text — not a link).

Where the operation of the Platform requires your personal data to be transferred to or processed by service providers located outside of Malaysia (for example, cloud hosting providers or international payment processors), depo89 will ensure that appropriate safeguards are in place to protect your data. These safeguards may include:

• Contractual clauses requiring the recipient to apply data protection standards equivalent to those required by applicable Malaysian law;
• Transfers to jurisdictions that have been assessed as providing an adequate level of data protection;
• Other legally recognised transfer mechanisms as applicable.

Where personal data is processed by third-party service providers, we enter into data processing agreements that contractually bind those providers to comply with our data protection standards.

depo89 reserves the right to amend or update this Privacy Policy at any time in response to changes in law, Platform features, or our data practices. Where changes are material, we will make reasonable efforts to notify registered Users by email or via an in-Platform notification prior to the amended Policy taking effect.

The date of the most recent revision is displayed at the top of this page. Your continued use of the Platform following the effective date of any amended Policy constitutes your acknowledgement of the revised Policy. We encourage you to review this page periodically to stay informed of how we are protecting your data.

If you have any questions, concerns, or requests in connection with this Privacy Policy or the way in which depo89 handles your personal data, please contact our team using the details below. All privacy-related communications are treated with priority and in strict confidence.

For complaints that remain unresolved after engaging our support team, you may also seek guidance from the relevant data protection authority in your jurisdiction. We take all privacy complaints seriously and will investigate and respond to each one in good faith.