Privacy Policy

Privacy Policy hi89 – Personal Data Protection for Malaysian Users

Hi89 takes the privacy and security of every user's personal data seriously. This document transparently explains how we collect, use, store, and protect your information — in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). Please read this policy carefully to understand your rights as a hi89 platform user.

Last Updated: 1 January 2026

Hi89's Six Data Protection Principles

Privacy is more than a legal document to hi89 — it is a core part of our platform's values. The following are the fundamental principles that guide how we handle your data.

Bank-Grade Encryption

All data transmitted between your device and hi89 servers is protected with 256-bit SSL encryption. Sensitive information such as banking details and passwords is never stored in plain text.

Minimum Data Collection

Hi89 only collects data that is strictly necessary for platform operations. We do not collect irrelevant information and never sell users' personal data to any third party.

Full PDPA Compliance

All data handling practices at hi89 are designed to fully comply with the Malaysia Personal Data Protection Act 2010. Users have full rights to access, correct, and request deletion of their data.

Strict Access Controls

Access to user personal data at hi89 is restricted to staff who genuinely need it to perform their duties. All access is logged and continuously monitored.

No Data Sales

Hi89 never sells, rents, or discloses users' personal data to third parties for marketing or commercial purposes. Your data remains yours and is used only for the purposes for which you have given consent.

Periodic Reviews

The hi89 Privacy Policy is reviewed and updated periodically to ensure it reflects industry best practices and changes in data protection laws applicable in Malaysia.


Important Note:
This Privacy Policy describes the data collection and usage practices of hi89. By using the hi89 platform, you agree to the terms set out in this policy. If you do not agree, please discontinue use of the platform and contact us to request deletion of your data.

1Scope of This Privacy Policy

This Privacy Policy applies to all users who access or use the hi89 platform through our official website, Android and iOS mobile apps, and any other official hi89 digital channels.

This policy covers the collection, processing, storage, disclosure, and deletion of user personal data. It also outlines your rights under the Malaysia Personal Data Protection Act 2010 (PDPA) and how you may exercise those rights.

This policy does not apply to third-party websites or services that may be linked from the hi89 platform. We encourage users to read the privacy policy of any third party separately before using their services.

2Personal Data We Collect

Hi89 collects various types of personal data depending on how you interact with our platform. The following are the main categories of data we collect:

Data Category Examples of Information Purpose of Collection
Identity Full name, IC/passport number, date of birth KYC verification, legal compliance
Contact Email address, phone number, residential address Account communications, two-factor authentication
Financial Bank account details, deposit & withdrawal records Payment processing, AML compliance
Technical IP address, device type, operating system, browser Security, fraud detection
Usage Betting records, games played, active hours Service improvement, responsible gaming

Hi89 does not collect sensitive data such as health information, religious beliefs, or users' political views. All data collection is carried out with user consent and for stated purposes only.

3How Your Data Is Used

Personal data collected by hi89 is used solely for legitimate purposes necessary for platform operations. The following are the primary purposes for which your data is used:

  • Account Management: Creating, verifying, and maintaining your hi89 account, including KYC processes required by law.
  • Transaction Processing: Processing deposits, withdrawals, and all financial activities securely and accurately.
  • Platform Security: Detecting and preventing fraud, money laundering, and unauthorized access to user accounts.
  • Communications: Sending important account notifications, terms updates, security alerts, and promotional offers (with consent).
  • Service Improvement: Analyzing aggregated usage patterns to improve user experience and platform performance.
  • Responsible Gaming: Monitors gameplay patterns to identify users who may need support related to responsible gambling.
  • Legal Compliance: Fulfilling reporting and compliance obligations to the relevant regulatory authorities.
hi89 Guarantee: Your data is not used for automated decision-making that could negatively affect you without human intervention. Any material decisions relating to your account involve review by our team.

4Data Sharing and Disclosure

Hi89 does not sell or disclose users' personal data to external parties for commercial purposes. However, in certain limited situations, data may be shared with the following parties:

  • Payment Service Providers: Providers such as FPX, DuitNow, and digital wallet processors receive the transaction information required to process your payments. They are bound by strict confidentiality agreements.
  • KYC Service Providers: Approved identity verification partners receive the data necessary to conduct KYC and AML compliance checks.
  • Regulatory Authorities: hi89 will disclose information to law enforcement or regulatory authorities when required by law, including in financial crime investigations.
  • Technical Infrastructure Providers: Cloud hosting and cybersecurity service providers that help operate the hi89 platform, all bound by comprehensive data protection agreements.
Note: All third parties receiving hi89 user data have signed strict confidentiality and data protection agreements. hi89 is responsible for ensuring these partners uphold the same high data protection standards that we maintain ourselves.

5Data Storage & Security Measures

Hi89 stores user data on secure servers with industry-standard security measures. Below is an overview of the technical security practices we employ:

  • 256-bit SSL/TLS encryption for all data transmitted over the network.
  • AES-256 encryption for sensitive data stored in databases.
  • Two-factor authentication (2FA) available for all user accounts.
  • 24/7 security monitoring by a dedicated cybersecurity team.
  • Regular security audits conducted by independent third-party security firms.
  • Automated data backups with a tested disaster recovery system.

Data retention periods are as follows: active account data is retained for the duration the account remains active; financial transaction data is retained for a minimum of 7 years for legal compliance purposes; technical log data is retained for 90 days. Upon expiry of the retention period, data is securely deleted using industry-standard methods.

6Cookies & Tracking Technologies

Hi89 uses cookies and similar tracking technologies to enhance the user experience and ensure platform security. There are several types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
  • Performance Cookies: Collecting anonymized information on how users interact with the platform to help us improve performance and usability.
  • Functional Cookies: Storing user preferences such as language, theme, and display settings to deliver a more personalized experience.
  • Security Cookies: Used to detect suspicious activity and protect user accounts from unauthorised access.

You can manage cookie settings through your web browser settings. However, disabling essential cookies may affect the functionality of the hi89 platform. For more information on managing cookies, please refer to your web browser documentation.

7User Rights Under PDPA

As a registered hi89 platform user in Malaysia, you have the following rights under the Personal Data Protection Act 2010:

Right of Access

You have the right to request a copy of all personal data we hold about you. Requests will be processed within 21 working days.

Right to Rectification

If your data is inaccurate or outdated, you have the right to request a correction via your account settings or by contacting our support team.

Right to Erasure

You may request the deletion of your personal data, subject to applicable legal retention obligations.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time, without penalty.

Right to Data Portability

You have the right to receive your data in a machine-readable format and transfer it to another service provider.

Right to Restriction of Processing

In certain situations, you have the right to request a restriction on the processing of your data while a dispute is being resolved.

How to Exercise Your Rights: To exercise any of the rights above, contact the hi89 data protection team by email at [email protected] or via live chat on the platform. We will verify your identity before processing any data-related requests.

8Children's Data Protection

The hi89 platform is strictly for individuals aged 18 and above. hi89 does not knowingly collect, process, or store the personal data of individuals under 18 years of age.

If we discover that personal data of an individual under 18 has been inadvertently collected, we will take immediate action to delete that data and close the account in question. Parents or guardians who become aware that their child has registered on the hi89 platform are encouraged to contact us immediately at [email protected].

9International Data Transfers

In the course of its operations, hi89 may transfer user personal data to servers or partners located outside Malaysia. Any such data transfer is carried out with adequate safeguards, including:

  • Ensuring the recipient country has data protection laws that are equivalent to or stricter than those in Malaysia.
  • Applying approved standard contractual clauses to protect data during transfers.
  • Ensuring all international data recipients are subject to comprehensive data processing agreements.

Hi89 prioritises storing Malaysian users' data within the Asia Pacific region where possible, to ensure maximum compliance with local laws.

10Data Breach Response

Hi89 has a comprehensive incident response procedure to address any data breaches that may occur. In the event of a data breach affecting users' personal data:

  • Hi89 will notify affected users within 72 hours of a breach being detected, in line with international best practices.
  • Notifications will include details on the nature of the breach, data involved, actions already taken, and steps users can take to protect themselves.
  • Hi89 will report material breaches to the relevant authorities as required by law.
  • A thorough investigation will be conducted, and the findings and remedial actions will be shared with affected users.
Phishing Alert: hi89 will never ask for your password, PIN, or OTP via email, SMS, or phone. If you receive such a communication claiming to be from hi89, please report it to our security team immediately.

11Changes to the Privacy Policy

Hi89 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. The "Last Updated" date at the top of this page will always reflect the latest version of this policy.

For material changes — those that significantly affect how we collect or use your data — hi89 will provide at least 14 days' advance notice via in-platform notifications or email to your registered address. Continued use of the hi89 platform after receiving notice of changes is considered acceptance of the updated policy.

12Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding how hi89 handles your personal data, please contact our Data Protection Officer through the following channels:

  • Privacy Email: [email protected] — for all enquiries relating to data protection and user rights requests.
  • Live Chat Support: Available 24/7 within the hi89 platform — for immediate inquiries regarding privacy and account security.

We are committed to responding to all privacy-related enquiries within 3 working days. For formal requests under PDPA, such as data access or data deletion, we will provide a full response within 21 working days as required by law.

Our Commitment: hi89 respects every user's right to privacy and we are always ready to help you understand and exercise your data protection rights. Your privacy is not only our legal obligation — it is a moral responsibility we take seriously.

Play with Confidence at hi89

Your personal data is protected with the latest encryption technology. Register a hi89 account today and enjoy a safe, fair, and responsible wagering experience alongside over 500,000 users in Malaysia.

256-bit SSL Encryption
Malaysia PDPA Compliance
No data sales
Bahasa Melayu