Your privacy matters to us. This Policy explains exactly what personal data gan89 collects, how it is used, who it may be shared with, and the rights you hold over your own information.
Last Updated: 1 January 2026All personal and financial data stored and transmitted on the gan89 platform is protected by 256-bit SSL encryption. Your information cannot be intercepted in transit or accessed from our servers without authorisation.
gan89 does not sell, rent, or trade your personal data to third-party marketers, data brokers, or advertising networks. Your data belongs to you and is used solely for operating and improving our platform.
Identity documents such as your Malaysian MyKad or passport, submitted for KYC verification, are stored securely and accessed only by authorised compliance personnel. They are never shared with third parties outside of required verification processes.
Malaysian users and all gan89 account holders have the right to access, correct, or request deletion of their personal data. Submit a data request to our support team and we will respond within 14 business days.
gan89 uses only essential operational cookies necessary for platform functionality and security. We do not use third-party advertising cookies or behavioural tracking technologies without your explicit prior consent.
Every category of data we collect, the specific purpose for which it is processed, and the legal basis for that processing is disclosed in full within this Privacy Policy. No hidden data collection, no ambiguous consent.
This Privacy Policy ("Policy") is issued by gan89 ("gan89", "we", "us", "our"), the operator of the online gambling platform accessible at https://gan89.click (the "Platform"). This Policy describes how gan89 collects, uses, stores, discloses, and protects the personal data of individuals ("Users", "you", "your") who access, register on, or interact with the Platform.
gan89 is committed to protecting the privacy and security of all Users. We recognise the importance of personal data protection, particularly in the context of financial and identity information associated with online gambling accounts. This Policy reflects that commitment and sets out our obligations and your rights with full transparency.
By registering an account with gan89 or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you must cease using the Platform immediately.
This Policy applies to all Users of the gan89 Platform, including players located in Malaysia and other jurisdictions. Malaysian users' data is handled with particular care given the sensitivity of gambling-related personal information in the local regulatory context.
For the purposes of this Privacy Policy, the following definitions apply:
| Term | Meaning |
|---|---|
| Personal Data | Any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, location data, or any combination thereof that can identify an individual. |
| Data Controller | gan89, the entity that determines the purposes and means of processing Users' personal data on this Platform. |
| Data Processor | Any third-party service provider that processes personal data on behalf of gan89 and under gan89's instructions, such as KYC verification partners, payment processors, and cloud hosting providers. |
| Processing | Any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, restriction, erasure, or destruction. |
| Consent | A freely given, specific, informed, and unambiguous indication of a User's agreement to the processing of their personal data for a stated purpose. |
| KYC Data | Identity verification documents submitted by Users, including Malaysian MyKad, passport, proof of address, and source-of-funds documentation. |
| Transaction Data | Records of all financial activity on the Platform, including deposits, withdrawals, wagers, bonus credits, and account balance history. |
| Usage Data | Technical data generated by a User's interaction with the Platform, including IP address, device identifiers, browser type, pages visited, session duration, and click-stream data. |
gan89 collects only the personal data that is necessary for the lawful operation of the Platform, fulfilment of our regulatory obligations, and delivery of services to Users. The categories of personal data we collect are as follows:
gan89 collects personal data through the following channels and mechanisms:
The majority of personal data we hold is provided directly by you when you register an account, complete KYC verification, make deposits or withdrawals, contact our support team, or interact with any feature of the Platform that requires input.
When you access and use the gan89 Platform, certain technical data is collected automatically by our servers and analytics systems. This includes your IP address, device identifiers, browser information, and behavioural data such as pages visited and time spent on the Platform. This data is collected using server logs, session cookies, and related technologies.
gan89 may receive personal data about you from verified third-party sources in the following circumstances: (a) identity verification and KYC screening services that cross-reference your submitted documents against external databases; (b) fraud detection and anti-money laundering screening services; (c) payment processors and financial institutions processing your deposits and withdrawals; and (d) analytics and security service providers operating on our infrastructure.
All third-party service providers from whom we receive data are subject to contractual data processing agreements that require them to handle your personal data in compliance with applicable privacy standards. We do not purchase data lists from data brokers.
gan89 processes your personal data for the following specific purposes:
| Processing Purpose | Description |
|---|---|
| Account Creation & Management | To register, authenticate, and maintain your gan89 user account, including password management, session control, and account settings. |
| Identity Verification (KYC) | To verify your identity and age (minimum 21 years) in compliance with our platform obligations and to prevent underage gambling and fraudulent account creation. |
| Payment Processing | To process deposits made via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, RHB, Bitcoin, USDT, and ETH; and to fulfil withdrawal requests to your verified payment accounts. |
| Fraud Prevention & Security | To detect and prevent fraudulent activity, account takeovers, bonus abuse, money laundering, and any other prohibited activities on the Platform. |
| Regulatory Compliance | To fulfil anti-money laundering (AML), Know Your Customer (KYC), and other applicable regulatory obligations, including responding to lawful requests from competent authorities. |
| Customer Support | To handle your support inquiries, resolve complaints, process self-exclusion requests, and manage your responsible gambling tool settings. |
| Platform Improvement | To analyse aggregate usage patterns, improve Platform features, optimise user experience, and develop new services in response to player feedback from our Malaysian user base. |
| Marketing Communications | To send promotional offers, bonus notifications, and platform updates to Users who have opted in to receiving such communications. Opt-out is available at any time via account settings or by contacting support. |
| Responsible Gambling Monitoring | To monitor gambling behaviour patterns that may indicate problem gambling, enforce deposit limits and self-exclusion orders, and provide appropriate interventions where required. |
gan89 does not use your personal data for automated profiling that produces legally significant decisions without human review. No personal data is used to discriminate against Users based on protected characteristics.
gan89 processes personal data only where a valid legal basis exists for doing so. The legal bases on which we rely are as follows:
gan89 does not sell, rent, or transfer your personal data to third parties for their own commercial purposes. We may share your personal data in the following limited and controlled circumstances:
We share personal data with vetted third-party service providers who process it exclusively on our behalf and under our instruction. These include: identity verification and KYC service providers; payment processors for e-wallet and bank transfer transactions (Touch 'n Go, GrabPay, Boost, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, RHB); cryptocurrency transaction processors; cloud infrastructure and hosting providers; fraud detection and security analytics providers; and customer support platform providers.
All such service providers are bound by data processing agreements requiring them to process personal data only as instructed by gan89, to maintain appropriate security measures, and to comply with applicable privacy laws.
gan89 may disclose personal data to competent legal, governmental, or regulatory authorities where required to do so by applicable law, court order, or valid legal process. In all such cases, we will disclose only the minimum data necessary to satisfy the legal requirement.
In the event of a merger, acquisition, corporate restructuring, or sale of all or substantially all of gan89's assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will provide notice of any such transfer and the acquirer will be required to honour the protections set out in this Privacy Policy.
gan89 will not share your personal data with any third party not covered by the above categories without first obtaining your explicit, informed consent.
Our Commitment: gan89 never sells personal data to advertising networks, data brokers, or third-party marketers. Your data is used to operate and improve our platform — nothing more.
gan89 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as general guidance:
| Data Category | Retention Period |
|---|---|
| Account Registration Data | Duration of active account plus a minimum of 5 years following account closure, to satisfy AML record-keeping requirements. |
| KYC Verification Documents | Minimum 5 years from the date of submission or from account closure (whichever is later), as required for AML/KYC compliance. |
| Transaction and Financial Records | Minimum 7 years from each transaction date, in line with financial record-keeping requirements. |
| Communications and Support Records | 3 years from the date of the last interaction, unless the record relates to an ongoing complaint, investigation, or legal matter. |
| Usage and Technical Data | Up to 24 months from collection, unless retained longer for fraud investigation or security incident analysis purposes. |
| Marketing Consent Records | Until consent is withdrawn, plus 1 year for audit trail purposes. |
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised such that it can no longer be linked to an identifiable individual.
gan89 implements and maintains a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Our key security measures include:
Your Responsibility: While gan89 implements robust security measures, the security of your account also depends on you maintaining a strong, unique password and keeping your login credentials confidential. If you suspect your account has been compromised, contact our support team immediately at [email protected].
gan89 uses cookies and similar technologies on the Platform to ensure correct functionality, maintain session security, and gather aggregate usage data for platform improvement purposes. A cookie is a small text file stored on your device by your web browser.
These cookies are strictly necessary for the Platform to function correctly. They enable core features such as user authentication, session management, fraud detection, and security functions. Essential cookies cannot be disabled without impairing Platform functionality.
Functional cookies remember your preferences and settings — such as your preferred language, currency display (MYR or cryptocurrency), and game lobby layout — to provide a personalised and consistent experience across sessions.
With your consent, gan89 may use analytics cookies to collect aggregate, anonymised data about how Users interact with the Platform. This data is used solely to improve Platform performance and user experience. Analytics data is never linked to personally identifiable information without explicit consent.
You may manage or disable non-essential cookies at any time through your browser settings. Note that disabling certain cookies may affect the functionality and performance of the Platform. Instructions for managing cookies are available in your browser's help documentation.
gan89 does not use third-party advertising cookies, cross-site tracking cookies, or retargeting technologies that profile your browsing behaviour outside of the gan89 Platform.
As a User of the gan89 Platform, you hold the following rights with respect to your personal data. To exercise any of these rights, submit a written request to [email protected]. We will respond within fourteen (14) business days of receiving a valid, verifiable request.
Request a copy of all personal data gan89 holds about you, together with information about how it is used and with whom it is shared.
Request correction of inaccurate or incomplete personal data we hold about you. You may update certain details directly in your account settings.
Request deletion of your personal data where it is no longer necessary for the purpose collected, subject to our legal retention obligations for financial and KYC records.
Request that we restrict processing of your data in certain circumstances — for example, while the accuracy of data you have disputed is under review.
Where processing is based on your consent or a contract, request your personal data in a structured, machine-readable format for transfer to another service provider.
Object to processing of your data based on legitimate interests at any time. You may also withdraw marketing consent at any time via your account settings or by contacting support.
Exercise of these rights is subject to verification of your identity. Some rights may be limited where processing is required by legal obligation — for example, we cannot delete transaction records that must be retained for AML compliance, even upon request. We will explain any such limitations clearly when responding to your request.
Some of the third-party service providers used by gan89 to operate the Platform — including cloud hosting infrastructure, fraud detection systems, and KYC verification services — may process personal data in jurisdictions outside of Malaysia. Where such international transfers occur, gan89 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to or exceeding the protections afforded under Malaysian law.
Safeguards employed for international data transfers include: contractual data processing agreements incorporating data protection obligations; transfer to jurisdictions with recognised adequacy determinations for data protection; and technical measures such as data minimisation and encryption that protect personal data regardless of the jurisdiction in which it is processed.
Users who wish to obtain further information about the specific safeguards applicable to international transfers of their personal data may contact us at [email protected].
The gan89 Platform is strictly intended for use by adults aged 21 years and above. gan89 does not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is conducted as part of the account registration and KYC process, and any account found to be held by a person under 21 years of age will be immediately closed.
If you are a parent or guardian and believe that your child may have accessed or registered on the gan89 Platform without your knowledge, please contact us immediately at [email protected]. We will investigate the matter promptly and, where confirmed, will delete all personal data associated with the minor's account and refund any deposited funds to the originating payment method.
21+ Only: By registering on gan89, you confirm that you are at least 21 years of age. Providing false information about your age during registration constitutes a breach of our Terms & Conditions and may result in account closure and forfeiture of balances.
gan89 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform features. When material changes are made, we will update the "Last Updated" date displayed at the top of this page. Where the changes are significant, we will provide more prominent notice to Users via in-platform notification or email.
We encourage Users to review this Privacy Policy periodically. Your continued use of the gan89 Platform after the effective date of any updated Policy constitutes your acknowledgement of the updated terms. If you do not agree with any changes made to this Policy, you must cease using the Platform and may request account closure.
Archived versions of previous Privacy Policies are available on request by contacting our support team.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by gan89, please contact our Data Privacy team through the following channels. All privacy-related requests are handled confidentially and in accordance with our internal data protection procedures.
Questions about how gan89 handles your data? Our privacy team is available 24/7. We believe transparent data practices build the trust that makes gan89 Malaysia's most reliable online gambling platform.
For players aged 21 and above only. Play responsibly. · gan89 © 2026