Privacy Policy

This Privacy Policy (the "Policy") is issued by ayu89 (hereinafter "ayu89", "we", "us", or "our"), the operator of the online casino and sports betting platform accessible at https://ayu89.click. This Policy governs the collection, use, storage, disclosure, and protection of personal data provided by or obtained from all registered users and visitors of the ayu89 Platform (collectively referred to as "you", "the User", or "the Player").

ayu89 is committed to protecting the privacy and personal data of all players, particularly those accessing the Platform from within Malaysia, including from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other locations throughout the country. We recognise the trust Malaysian players place in us when they deposit funds via DuitNow, Touch 'n Go eWallet, FPX, or Maybank2u, and we take our responsibility to safeguard associated personal data with the utmost seriousness.

By registering an Account on the ayu89 Platform, accessing our services, or continuing to use the Platform after this Policy has been communicated to you, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

For the purposes of this Policy, the following terms carry the meanings assigned below:

ayu89 collects Personal Data that is necessary for the operation of the Platform, fulfilment of our legal and regulatory obligations, and provision of a safe and personalised experience for Malaysian players. The categories of data we collect are set out below:

ayu89 collects Personal Data through the following channels and mechanisms:

• Direct Submission: Data you provide when completing the account registration form, submitting KYC documents, initiating a deposit or withdrawal, or contacting our customer support team via live chat or email.
• Automated Collection: Technical Data collected automatically when you access the Platform, including via session cookies, server access logs, and browser fingerprinting used for security fraud detection.
• Payment Processors: Confirmation data relayed by Malaysian payment processors including DuitNow, FPX gateway operators, and e-wallet providers (Touch 'n Go eWallet, Boost, GrabPay) upon successful transaction completion. ayu89 receives transaction reference identifiers and masked payment details — full card or bank account numbers are not transmitted to ayu89.
• Identity Verification Providers: Where a third-party KYC verification service is used to validate identity documents, data processed by that provider is subject to both this Policy and the provider's own data protection terms.
• Platform Interaction: Gaming Activity Data generated organically as you use the Platform — including bets placed on EPL, Liga Super Malaysia, UFC fixtures, or casino game sessions.

ayu89 processes your Personal Data only where a valid legal basis exists for doing so. The primary purposes of processing and the corresponding legal bases are detailed below:

• Contract Performance: Processing necessary to fulfil our contractual obligations to you as a registered Player — including account management, processing deposits and withdrawals in MYR, verifying your identity, applying bonuses, and providing customer support.
• Legal and Regulatory Compliance: Processing required to meet our obligations under applicable gaming regulations, anti-money laundering (AML) frameworks, Know Your Customer (KYC) requirements, and record-keeping obligations. ayu89 is obligated to retain certain transaction and identity records irrespective of a Player's request for deletion.
• Legitimate Interests: Processing undertaken to protect the integrity of the Platform, detect and prevent fraud, identify problem gambling patterns that may indicate a need for responsible gaming intervention, and maintain system security — provided such processing does not override your fundamental privacy rights.
• Consent: Where processing is not covered by the above legal bases — such as sending optional promotional communications about new games, bonus offers, or Liga Super Malaysia betting markets — ayu89 will seek your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

ayu89 does not sell, rent, or trade your Personal Data. We share your data only in the limited circumstances described below, and only to the extent necessary for the specified purpose:

• Payment Service Providers: Personal Data necessary to process your deposit or withdrawal is shared with the relevant payment processor (e.g., DuitNow operator, FPX gateway, e-wallet provider). These processors are contractually bound to use your data solely for transaction processing and are prohibited from retaining it for any other purpose.
• Identity Verification Services: Where required for KYC compliance, identity documents are shared with our contracted verification partner. Such partners operate under strict data processing agreements and applicable data protection standards.
• Game Content Providers: Anonymised or pseudonymised session data may be shared with licensed game studios to facilitate game performance analytics. No identifiable Personal Data is shared with game providers.
• Legal and Regulatory Authorities: ayu89 may disclose Personal Data to law enforcement agencies, gaming regulators, or financial intelligence units where required by applicable law, court order, or binding regulatory directive. We will notify you of such disclosure where legally permitted to do so.
• Professional Advisers: Legal counsel, auditors, and compliance consultants engaged by ayu89 may have access to Personal Data where necessary for the provision of professional services, subject to confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of ayu89's assets, Personal Data may form part of the transferred assets. Affected Players will be notified in advance of any such transfer.

ayu89 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation. The following retention guidelines apply:

• Account and Identity Data: Retained for the duration of your active Account and for a minimum of five (5) years following Account closure, in compliance with AML record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of seven (7) years from the date of the transaction, consistent with standard financial record-keeping requirements applicable to payment processors operating in Malaysia.
• Gaming Activity Data: Retained for up to three (3) years from the date of each gaming session, used for dispute resolution, responsible gambling monitoring, and platform integrity audits.
• Support Communications: Live chat logs and email correspondence with the support team at [email protected] are retained for two (2) years from the date of the interaction for quality assurance and compliance purposes.
• Technical and Log Data: Server access logs and session data are retained for up to twelve (12) months for security monitoring purposes, after which they are anonymised or securely deleted.

Upon the expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. Where data forms part of an ongoing legal dispute or regulatory investigation, retention will be extended until the matter is fully resolved.

ayu89 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• Encryption: All data transmitted between your browser and the ayu89 Platform is encrypted using TLS 1.3. Personal Data stored in our databases is encrypted at rest using AES-256.
• Access Controls: Access to Personal Data is restricted to authorised ayu89 personnel on a strictly need-to-know basis. All internal access is logged and subject to regular audit.
• Two-Factor Authentication: Player Accounts support optional two-factor authentication (2FA) as an additional security layer. We strongly encourage all Malaysian players to enable 2FA.
• Penetration Testing: The Platform undergoes regular third-party penetration testing and vulnerability assessments. Identified vulnerabilities are remediated according to a risk-based priority framework.
• Fraud Detection: Automated systems monitor account activity in real time for signs of unauthorised access, payment fraud, or suspicious gambling behaviour patterns.
• Incident Response: ayu89 maintains a documented data breach response plan. In the event of a significant data breach, affected Players will be notified within 72 hours of discovery, to the extent practicable.

ayu89 uses cookies and similar technologies on the Platform for the following limited purposes:

• Session Cookies: Strictly necessary cookies that maintain your authenticated session while you are logged in. These expire automatically when you close your browser and cannot be disabled without impacting Platform functionality.
• Security Cookies: Used to detect and prevent fraudulent login attempts, bot activity, and cross-site request forgery (CSRF). These cookies are essential to Platform security and cannot be deactivated.
• Performance Cookies: First-party analytics cookies that collect anonymised data about page load times, feature usage frequency, and error rates. This data is used solely by ayu89's technical team to improve Platform performance and has no marketing function.
• Preference Cookies: Optional cookies that remember your language preference, display settings, or other customisations you have made to your Platform experience.

ayu89 does not use third-party advertising cookies, cross-site tracking pixels, social media tracking scripts, or any cookie technology designed to build advertising profiles or follow your activity outside the ayu89 Platform.

You may manage cookie preferences through your browser settings. Please note that disabling session or security cookies will prevent you from logging in to your ayu89 Account and using Platform features.

As an individual whose Personal Data is processed by ayu89, you hold a set of data rights. ayu89 is committed to facilitating the exercise of these rights in a timely and transparent manner. Your rights are summarised below:

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request", including your Account username and a description of the right you wish to exercise. ayu89 will respond within 14 business days of receiving a verified request. Identity verification may be required before a request is actioned.

The ayu89 Platform is strictly restricted to persons aged 21 years and above. ayu89 does not knowingly collect, solicit, or process Personal Data from any individual under the age of 21. If we become aware that Personal Data has been collected from an individual below the minimum age, we will immediately suspend the associated Account, void any Account balance, and delete the collected data as promptly as technically feasible.

If you are a parent or guardian and believe that your minor child has registered an Account on the ayu89 Platform, please contact us immediately at [email protected] so that we may investigate and take appropriate action without delay.

ayu89 primarily stores and processes Personal Data on servers located within its regulated operating jurisdiction. In certain circumstances — such as where a contracted third-party service provider (e.g., a KYC verification platform or cloud infrastructure provider) operates servers outside Malaysia — Personal Data may be transferred to and processed in jurisdictions outside Malaysia.

Where such international transfers occur, ayu89 takes the following measures to ensure your data remains adequately protected:

• Contractual obligations are imposed on all third-party processors requiring them to maintain data protection standards equivalent to those applied by ayu89.
• Where feasible, data is stored in data centres certified to internationally recognised security standards (e.g., ISO 27001).
• Transfers are limited in scope to the minimum data necessary for the purpose of the transfer.
• Third-party processors are not permitted to use transferred data for any purpose other than the contracted service.

ayu89 reserves the right to update, revise, or replace this Privacy Policy at any time. Where changes are material — such as a new category of data being collected, a new purpose being introduced, or a significant change to data sharing practices — we will provide advance notice to registered Players via the email address associated with their Account, at least 7 calendar days before the changes take effect.

Minor or administrative amendments (e.g., clarification of existing practices, updated contact details) may be made without advance notice, provided they do not affect the substantive rights of Players. The "Last Updated" date at the top of this page will be revised upon any amendment, whether material or minor.

Your continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the changes, you must cease using the Platform and may request Account closure in accordance with the Terms and Conditions.

If you have any questions, concerns, or complaints relating to this Privacy Policy, the manner in which ayu89 processes your Personal Data, or if you wish to exercise any of your data rights as described in Section 10, please contact us through the following channels:

• Live Chat: Available directly on the Platform, 24 hours a day, 7 days a week. Average first-response time under 90 seconds.
• Email: [email protected] — for data rights requests, please use the subject line "Data Rights Request" and include your Account username.

ayu89 is committed to resolving privacy-related concerns promptly and transparently. We will acknowledge receipt of all written privacy complaints within 3 business days and aim to provide a substantive response within 14 business days.