Privacy Policy — 8989a

8989a ("we", "us", "the Platform") is committed to protecting the privacy and personal data of all individuals who interact with our services. This Privacy Policy sets out in clear, accessible terms how we handle personal information, why we collect it, how long we keep it, and what rights you have in relation to your own data.

By registering an account on 8989a, making a deposit, placing a wager, or simply visiting the Platform, you acknowledge that you have read and understood this Privacy Policy. Your continued use of the Platform constitutes acceptance of the data practices described herein. If you do not agree with any aspect of this Policy, please discontinue use of the Platform and contact us to request account closure.

8989a primarily serves players based in Indonesia. Where we reference applicable law, we do so with regard to internationally recognised data protection standards, including principles derived from the General Data Protection Regulation (GDPR) and comparable frameworks, applied as best practice in the context of our international operations.

For the purposes of this Privacy Policy:

• "Personal Data" means any information that relates to an identified or identifiable living individual. This includes your name, email address, phone number, device identifiers, IP address, and financial account details.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, or deletion.
• "Data Controller" means 8989a, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of 8989a under a contractual arrangement and in accordance with our instructions.
• "Member" / "You" means any registered account holder or visitor to the 8989a Platform.
• "Platform" means the 8989a website at 8989a.net, its mobile-optimised site, and all associated services.
• "KYC" means Know Your Customer — the identity and age verification process applied to all Members before withdrawal processing or as otherwise required.
• "Cookies" means small text files stored on your device by the Platform to enable or improve site functionality, analytics, and personalisation.

8989a collects the minimum data necessary to operate a secure, compliant, and enjoyable betting platform. The categories of Personal Data we collect are set out in the table below.

We do not collect sensitive categories of Personal Data (such as racial or ethnic origin, health data, religious beliefs, or biometric data) unless you voluntarily disclose them to our support team in the course of a complaint or welfare check, in which case the data is handled with enhanced care and deleted once the matter is resolved.

8989a collects Personal Data through several channels:

• Directly from You: When you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact our support team, or update your account profile.
• Automatically: Through cookies, server logs, and similar tracking technologies when you visit or interact with the Platform. This includes your IP address, browser fingerprint, and session activity.
• From Third Parties: From identity verification providers engaged for KYC purposes, payment processors (including local Indonesian bank transfer intermediaries and e-wallet operators), fraud-prevention data brokers, and game studio operators where necessary to resolve a game-related dispute.
• From Public Sources: Occasionally from publicly available sources to verify information you have provided or to comply with anti-money-laundering obligations, such as politically exposed person (PEP) screening databases.

We process your Personal Data only for the purposes described below. We do not use your data for any purpose that is incompatible with the original purpose for which it was collected without first obtaining your consent.

• Account Management: Creating, maintaining, and securing your 8989a account, including password resets, account history, and preference settings.
• Identity Verification (KYC): Verifying that you are who you say you are, that you are at least 21 years of age, and that you are not subject to any self-exclusion or regulatory prohibition from using gambling services.
• Payment Processing: Processing deposits and withdrawals in IDR via local Indonesian banks and e-wallets, reconciling your account balance, and detecting payment fraud or chargebacks.
• Service Delivery: Operating the sportsbook, live casino, slot games, togel (Indonesia's traditional numbers lottery) markets, and all other products available on the Platform.
• Customer Support: Responding to your inquiries, resolving disputes, processing complaints, and providing welfare support where responsible gaming concerns are raised.
• Security and Fraud Prevention: Detecting and preventing fraudulent activity, multi-accounting, bonus abuse, match-fixing, money laundering, and other prohibited conduct.
• Legal and Regulatory Compliance: Meeting our obligations under applicable anti-money-laundering (AML), counter-terrorist financing (CTF), and licensing requirements, including record-keeping and reporting.
• Responsible Gaming: Monitoring for indicators of problem gambling behaviour and administering player-protection tools, including deposit limits, session limits, cooling-off periods, and self-exclusion.
• Analytics and Improvement: Understanding how Members use the Platform so that we can improve product quality, site performance, and the overall user experience.
• Marketing Communications: Sending promotional offers, bonus notifications, and Platform updates — but only to Members who have opted in. You may withdraw your marketing consent at any time by contacting support.

Where data protection law requires that we identify a lawful basis for processing Personal Data, we rely on the following grounds:

Where we rely on legitimate interests as a legal basis, we have assessed that our interests are not overridden by your fundamental rights or freedoms, taking into account the limited and proportionate nature of the data involved and the safeguards we have in place.

8989a does not sell, rent, or trade your Personal Data to any third party for that party's own commercial purposes. We share data only to the extent necessary for the operation of the Platform, and exclusively with the categories of recipient described below.

• Payment Processors: Indonesian bank transfer intermediaries and e-wallet operators (including those facilitating BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja transactions) receive the minimum financial and identity data required to execute your requested transaction.
• Identity Verification Providers: Third-party KYC providers who verify the authenticity of documents and check individuals against sanctions and PEP lists. These providers are bound by strict data processing agreements.
• Game Studio Operators: Studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Pocket Games Soft, and Spribe may receive a pseudonymous player identifier and session data to facilitate game delivery and dispute resolution. They do not receive your full identity or financial details.
• Fraud Prevention Services: Specialist providers who analyse transaction patterns and device data to detect money laundering, multi-accounting, and bonus abuse.
• Professional Advisors: Lawyers, auditors, and accountants who are bound by professional confidentiality obligations and receive data only as strictly required for their engagement.
• Law Enforcement and Regulators: Where required by law, court order, or regulatory authority, we may disclose Personal Data to competent authorities. We will notify you of any such disclosure where permitted to do so by law.

We retain Personal Data only for as long as is necessary for the purposes outlined in this Policy, or as required by applicable law. The following general retention periods apply:

• Active Account Data: Retained for the duration of your membership and for a period of five (5) years following account closure, to comply with AML record-keeping requirements and to resolve any post-closure disputes.
• KYC Documents: Retained for a minimum of five (5) years from the date of verification, in accordance with AML/CTF obligations.
• Transaction Records: Retained for five (5) years from the date of each transaction.
• Customer Support Communications: Retained for two (2) years from the date of the last interaction, unless the communication relates to a formal complaint or legal matter, in which case it is retained for five (5) years.
• Marketing Preferences and Consent Records: Retained for the life of the account plus two (2) years, to demonstrate compliance with consent-based marketing rules.
• Technical and Usage Logs: Retained for up to twelve (12) months for security and analytics purposes, then aggregated or anonymised.

At the end of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

8989a implements a comprehensive range of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the Platform is encrypted using industry-standard TLS protocols. The padlock icon in your browser confirms an active encrypted connection at all times.
• Data Encryption at Rest: Sensitive stored data — including financial account details and KYC documents — is encrypted at rest using AES-256 encryption.
• Access Controls: Personal Data is accessible only to 8989a staff and contractors who require it to perform their specific job function. Access is governed by role-based permissions and reviewed regularly.
• Two-Factor Authentication (2FA): 2FA is available and strongly recommended for all Member accounts to prevent unauthorised login attempts.
• Fraud and Anomaly Detection: Automated systems monitor account activity in real time for suspicious patterns, including unusual login locations, rapid successive withdrawals, and multi-account indicators.
• Penetration Testing: The Platform undergoes regular independent security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Data Breach Response: In the event of a Personal Data breach that is likely to result in risk to your rights and freedoms, 8989a will notify affected Members without undue delay and will take immediate steps to contain and remediate the incident.

8989a uses cookies and similar technologies to deliver, maintain, and improve the Platform. By continuing to use the Platform, you consent to our use of cookies as described below.

You can manage or delete cookies at any time through your browser settings. Please note that disabling strictly necessary cookies will impair Platform functionality and may prevent you from logging in or completing transactions.

8989a does not use third-party advertising cookies or permit advertising networks to place tracking cookies on the Platform.

As a Member of the 8989a Platform, you have the following rights in relation to the Personal Data we hold about you. To exercise any of these rights, contact our support team via live chat or at [email protected]. We will respond to all verified requests within thirty (30) days.

Exercising your rights will not result in any penalty to your account standing. Where a request is manifestly unfounded or excessive, we reserve the right to charge a reasonable fee or decline to act, with written explanation provided.

All registration attempts are subject to age verification as part of the KYC process. Where age cannot be satisfactorily confirmed, the account will remain restricted until verification is complete. 8989a does not conduct targeted marketing toward individuals who may be under the minimum age, and our Platform design intentionally avoids content or incentive structures that would appeal specifically to minors.

8989a may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or Platform features. Where a change is material — meaning it affects your rights or the way we use your data in a substantive manner — we will notify registered Members by email to the address on file at least seven (7) days before the change takes effect.

The "Last updated" date displayed at the top of this page indicates when the Policy was most recently revised. We encourage you to review this page periodically. Continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not accept the revised terms, you may request account closure in accordance with our Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 8989a handles your Personal Data, please contact our Data Protection team through the following channels:

• Live Chat: Available 24/7 directly on the Platform — fastest response for general privacy enquiries.
• Email: [email protected] — for formal data subject requests, please use the subject line "Privacy Request — [Your Username]". We aim to acknowledge all requests within 48 hours and to respond substantively within 30 days.

Our support team operates around the clock, 24 hours a day, 7 days a week, with Indonesian-speaking agents available during peak hours (WIB, UTC+7).