Privacy Policy 689

When you register or use the 689 platform, we collect various types of information to enable our services to function properly and securely. This information is divided into two main categories:

Information You Provide Directly:

• Full name as shown on your official identity document.
• Date of birth for age eligibility verification.
• Active email address and mobile phone number.
• Current residential address including postcode.
• MyKad number or passport number for KYC verification.
• Bank account or e-wallet details used for deposits and withdrawals.
• Any other information you provide when contacting our customer support.

Information Collected Automatically:

• IP address and IP-based location information.
• Device type, operating system, and browser version in use.
• Game session data including timestamps, bets, wins, and activity history.
• Access logs and complete financial transaction records.
• 689 App usage data, including frequency and duration of use.

689 uses collected information solely for legitimate purposes, stated transparently. Below is a summary table of our data usage purposes:

We do not use your data for any purpose other than those stated above without first obtaining your additional consent.

689 understands that your trust is our most valuable asset. We do not sell, transfer, or disclose your personal data to third parties except in limited, defined circumstances:

• Payment Providers: Transaction information is shared with certified FPX, Touch 'n Go, GrabPay, and DuitNow providers to process your deposits and withdrawals. These providers maintain their own privacy policies and are subject to strict security standards.
• Game Software Providers: Game session data is shared with our licensed game providers to ensure game integrity and fairness.
• Regulatory Authorities: 689 will disclose required information to the relevant authorities when mandated by Malaysian law.
• Fraud Investigators: In cases suspected to involve fraud, money laundering, or criminal activity, relevant information may be shared with law enforcement authorities.

All 689 third-party partners are required to comply with data protection standards equal to or higher than those we apply ourselves. Binding data processing agreements are signed with every partner.

The 689 platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions correctly. The following are the types of cookies we use:

• Essential Cookies: Required for basic platform functions such as login authentication and session management. These cookies cannot be disabled as they ensure the security of your account.
• Preference Cookies: Saves your preferences such as language, theme, and display layout so you do not need to reconfigure them each time.
• Analytics Cookies: Helps us understand how members use the 689 platform so we can make meaningful improvements. Analytics data is collected in aggregate and anonymised form.
• Security Cookies: Helps detect and prevent suspicious activity and security attacks on the platform and member accounts.

You can manage your cookie settings through your browser at any time. However, disabling essential cookies may affect the functionality and security of the 689 platform. All analytics and preference cookies are optional and can be declined without affecting your basic access to the platform.

689 implements multiple layers of technical and organisational security to protect your personal data from unauthorised access, disclosure, alteration, or destruction:

• Data Encryption in Transit: All communications between the 689 app/website and our servers are secured by TLS 1.3 protocol with AES-256 encryption.
• Data Encryption at Rest: Sensitive data such as banking information and KYC documents are stored in encrypted form on our servers.
• Regular Security Audits: Penetration testing and security audits are conducted regularly by independent third parties.
• 24/7 Threat Monitoring: An automated threat detection system monitors all platform activity around the clock and instantly alerts our security team.
• Staff Training: All 689 staff who handle personal data receive comprehensive data protection training and sign binding confidentiality agreements.

689 retains your personal data for as long as your account is active and for the period required under Malaysian law. Our retention policy is as follows:

• Active account data: Retained for as long as your account is active and in use.
• Financial transaction records: Retained for a minimum of 7 years after each transaction in accordance with anti-money laundering legal requirements.
• KYC Documents: Retained for a minimum of 5 years after account closure.
• Support communication logs: Retained for 2 years for reference and dispute resolution purposes.
• Analytics data: Stored in anonymised form after 13 months.

When the retention period expires or you request data deletion, we will securely delete or destroy your data using methods that ensure it cannot be recovered. Data deletion requests can be submitted through 689 customer support.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a data subject have the following rights regarding your personal data held by 689:

689 platform is exclusively for individuals who are aged 18 years and above. We do not intentionally collect, process, or store any personal data from individuals under the age of 18.

If we find that personal data of a minor has been collected without our knowledge, we will take immediate action to delete that data and close the associated account. Parents or guardians who become aware that their child has registered an account at 689 are requested to contact our support team immediately.

The 689 platform may contain links to third-party websites or services such as game providers or payment partners. These links are provided for your convenience only.

689 is not responsible for the privacy practices or content of such third-party websites. We encourage you to read the privacy policy of each website you visit separately. Your visits to third-party websites are entirely at your own risk and discretion.

689 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or service improvements. Any material amendments will be communicated to you via:

• In-account notifications within your 689 account.
• Email to the address registered in your account.
• Prominent notices on the 689 platform homepage.

The "Updated" date at the top of this page always reflects the date of the latest revision. Continued use of the 689 platform after any revision takes effect constitutes your acceptance of the amended policy. We recommend reviewing this page at least once every three months.

689 has appointed a Data Protection Officer (DPO) responsible for ensuring full compliance with Malaysia's PDPA and our internal privacy policies. Any privacy-related enquiries, concerns, or complaints may be directed to:

• Privacy Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 via the 689 platform
• Response Time: Within 2 working days for general enquiries; 30 days for data subject rights requests

If you are not satisfied with how we handle your privacy complaint, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia, the relevant regulatory authority under the Ministry of Communications and Digital Malaysia.