Data Protection

Ayu89 Privacy Policy – Our Commitment to Protecting the Personal Data of Malaysian Players

At ayu89, your privacy is something we take seriously. This Privacy Policy clearly explains how we collect, use, store, and protect your personal information when you use the ayu89 platform. It also outlines your rights as a data owner and how you can manage or withdraw your consent at any time.

Last updated: 1 January 2026

Your Data, Your Rights
ayu89 complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection standards.
SSL
256-bit
PDPA
Compliance
256-bit
SSL Encryption
PDPA
Full Compliance
0
Sale of Data to Third Parties
24/7
Security Monitoring
ayu89's Privacy Commitment

The Six Data Protection Principles We Uphold

This is the foundation of how ayu89 manages every member's personal data responsibly

Industry-Grade Security

All data transmitted between your device and ayu89's servers is protected by 256-bit SSL encryption – the same standard used by major banking institutions in Malaysia. Data is stored within secure server infrastructure with strict access controls.

Data Minimisation

Ayu89 only collects data that is strictly necessary to operate the platform and provide services to you. We do not collect excessive or irrelevant data that serves no legitimate operational purpose.

No Data Sales

Ayu89 does not sell, rent, or trade your personal data to any third party for their marketing or commercial purposes. Your data belongs to you, and we do not monetise it without your consent.

Full Control in Your Hands

You have the right to access, correct, update and request the deletion of your personal data from ayu89's systems. Data-related requests are processed within 14 business days by our data protection team.

Malaysia PDPA Compliance

Ayu89's Privacy Policy is drafted in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA). All data collection, processing and storage practices comply with the relevant provisions of Malaysian law.

Data Breach Notification

In the event of any security incident involving your personal data, ayu89 is committed to notifying you within a reasonable timeframe in accordance with applicable legal requirements, along with details of the remedial steps taken.

This Privacy Policy explains how ayu89 manages your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). By using the ayu89 platform, you acknowledge that you have read and understood this Privacy Policy. If you have any questions, our team can be reached at support@ayu89.onl at any time.

1. Introduction & Scope of Privacy Policy

This Privacy Policy is issued by ayu89, an online betting platform operating under the domain ayu89.onl. This document applies to all personal data collected, processed, stored, or used by ayu89 in connection with the operation of the platform and the provision of services to members.

We understand that your trust is our most valuable asset. When you register an account with ayu89, make a deposit via Touch 'n Go eWallet or DuitNow, play slots or Sports Betting, or reach out to our customer support – you share personal information that we handle with the utmost responsibility.

This Privacy Policy covers all data processing activities carried out directly by ayu89, including through its website, mobile interface, and all official platform communication channels. It does not cover the privacy practices of third parties you may visit via links within the ayu89 platform.

Important Note: ayu89 acts as the data controller for all personal data collected from Malaysian members. This means ayu89 is fully responsible for ensuring your data is processed lawfully, fairly, and transparently in accordance with the requirements of PDPA 2010.

2. Categories of Personal Data We Collect

Ayu89 collects various categories of personal data depending on how you interact with the platform. Below is a comprehensive overview of the data we may collect:

2.1 Identity & Contact Data

  • Full name as shown on identity card (MyKad)
  • Malaysian Identity Card number (MyKad number)
  • Date of birth
  • Current residential address
  • Malaysian phone number
  • Active email address

2.2 Account Data & Verification

  • Username and login credentials (passwords are stored in hashed form, not as plain text)
  • Identity verification documents (copies of MyKad or passport) submitted during the KYC process
  • Bank statement or proof of address document if requested
  • Bank account or e-wallet details registered for deposits and withdrawals

2.3 Financial & Transaction Data

  • A full record of all deposits and withdrawals (amount, date, method)
  • Complete transaction history within your ayu89 account
  • Payment method information used – Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX (Maybank2u, CIMB Clicks)
  • Account balance and claimed bonus history

2.4 Gaming Activity Data

  • Gaming history — slots played, sports bets placed, live casino sessions
  • Game session times and durations
  • Betting records, wins and losses
  • Limits and self-exclusion controls set by you

2.5 Technical & Usage Data

  • IP address and general location information (state within Malaysia)
  • Device type, operating system, and browser version
  • Platform access logs and usage patterns
  • Cookie data and session identifiers (see Section 8)

2.6 Communication Data

  • Live chat conversation records with the ayu89 support team
  • Emails and written communications you send to ayu89
  • Feedback and complaints submitted
Data Category Collected at Registration Collected During Use Required
Identity Data Yes Update only Required
Financial Data No Yes Required
Gaming Data No Yes Required
Technical Data No Yes (automatic) Partial
Communication Data No If you contact us Optional

3. How ayu89 Uses Your Personal Data

Ayu89 uses your personal data only for purposes that are legitimate, necessary, and directly related to the delivery of platform services. The following are the primary purposes for which your data is used:

3.1 Account & Platform Operations

Identity and account data are used to create and manage your ayu89 account, verify your identity at login, process deposits and withdrawals via your chosen Malaysian payment methods, and display your gaming and transaction history in your account dashboard.

3.2 Legal Compliance & Fraud Prevention

Ayu89 is required under Malaysian law to conduct KYC (Know Your Customer) and AML (Anti-Money Laundering) checks on all members. Your identity and financial data are used to fulfil these legal obligations, detect and prevent fraudulent activity, and report suspicious transactions to the relevant authorities where required by law.

3.3 Customer Support

Communication records and account data are used by the ayu89 support team to assist you whenever you reach out via live chat or email. This allows our team to provide more accurate and effective help without requiring you to repeat the same information each time.

3.4 Platform Improvement & User Experience

Usage and technical data collected in aggregate form (in a manner that cannot identify any individual) is used to understand platform usage patterns, identify areas for improvement, and develop new features better suited to the needs of Malaysian players on ayu89.

3.5 Marketing Communications (With Consent)

With your consent, ayu89 uses your email address and phone number to send information about active promotions, new bonuses, and special offers. You may opt out of receiving these marketing communications at any time via the unsubscribe link in any email or through your ayu89 account settings.

3.6 Responsible Gambling

Gaming activity data is used to monitor play patterns that may indicate signs of problem gambling. This is part of ayu89's commitment to responsible gaming. Our system can identify and reach out to players who may need assistance or a recommendation to use our self-exclusion tools.

4. Legal Basis for Data Processing

Every data processing activity carried out by ayu89 has a valid legal basis under Malaysia's PDPA. The bases we rely on are as follows:

  • Contract Performance: Data processing required to provide ayu89 platform services to you as a registered member — including account operations, payment processing, and game management.
  • Legal Obligation: Processing required to comply with applicable Malaysian law, including KYC/AML requirements, reporting to authorities, and compliance with PDPA 2010.
  • Legitimate Interests: Processing for the purposes of fraud prevention, platform security, service improvement, and the protection of ayu89's legitimate interests – provided those interests do not override your fundamental rights.
  • Consent: For processing that does not fall under the categories above – in particular, marketing communications – ayu89 obtains your explicit consent beforehand, and you may withdraw that consent at any time.

5. Sharing Data with Third Parties

Ayu89 does not sell or transfer your personal data to third parties for their own marketing purposes. However, in the course of operating the platform, ayu89 may share your personal data with a limited set of third-party categories as outlined below:

5.1 Payment Service Providers

To process your deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX (Maybank2u, CIMB Clicks), and other methods, ayu89 is required to share the necessary transaction information with the relevant payment service providers. This sharing is limited to what is strictly necessary to complete the transaction and is governed by binding data protection agreements.

5.2 Game Providers

Third-party game providers that supply slots, live casino, and other gaming products on the ayu89 platform may receive your game session data as required to operate the games. This data is generally limited to anonymous session identifiers and does not include your full name or financial information.

5.3 Authorities & Regulatory Bodies

Ayu89 may be required under Malaysian law to disclose your personal data to law enforcement agencies, courts, or regulatory bodies upon receipt of a lawful request. In such cases, ayu89 will comply with the applicable legal requirements.

5.4 Technical Service Providers

Technology providers that assist ayu89 with server hosting, platform analytics, email services, and other technical support may have limited access to personal data in the course of carrying out their responsibilities. All such providers are bound by data processing agreements that prohibit the use of your data outside the defined scope of their assigned duties.

Ayu89 does not share your personal data with advertisers, data brokers, third-party marketing companies, or any entity without a legitimate operational need. Any data sharing that takes place is based solely on binding contractual agreements and legal obligations.

6. Data Retention Period

Ayu89 retains your personal data for as long as necessary for the purposes stated in this Privacy Policy, or for as long as required by applicable law. The following are general data retention guidelines:

  • Active Account Data: Retained for as long as your ayu89 account remains active, and for any period following account closure required by law.
  • Financial & Transaction Records: Retained for a minimum of 7 years from the transaction date in accordance with Malaysian financial and accounting legal requirements.
  • KYC Documents: Retained for a minimum of 5 years after account closure or the date the document was submitted, in accordance with AML legal requirements.
  • Support Communication Logs: Retained for 2 years from the date of communication for service quality and dispute resolution purposes.
  • Technical & Access Log Data: Retained for 90 days for security and fraud detection purposes, then deleted or anonymised.

Once the applicable retention period has expired and there is no legal requirement to retain the data further, your personal data will be securely deleted from ayu89's systems or anonymised so it can no longer be linked back to you.

7. Data Security Measures Implemented

Ayu89 implements a comprehensive range of technical and organisational measures to protect your personal data from unauthorised access, deletion, alteration, or unlawful disclosure:

7.1 Technical Security

  • 256-bit SSL Encryption: All communications between your device and ayu89's servers are encrypted using the latest TLS/SSL protocols.
  • Static Data Encryption: Sensitive data stored in databases, including financial information, is encrypted at rest.
  • Hashed Passwords: Your password is never stored in plain text – it is processed using a strong one-way hashing algorithm.
  • Two-Factor Authentication (2FA): ayu89 offers 2FA to add an extra layer of security to your account.
  • 24/7 Monitoring: A continuous security monitoring system detects and addresses threats both automatically and manually.

7.2 Access Controls

Only ayu89 staff with legitimate operational needs are granted access to member personal data. Access is governed through a role-based access control (RBAC) system operating on the principle of least privilege. All access to sensitive data is logged and audited on a regular basis.

7.3 Physical Infrastructure

Ayu89 data is stored in data centres with strict physical security controls, including biometric access control, 24/7 CCTV surveillance, fire suppression systems, and power redundancy. These facilities comply with international industry security standards.

Your Role in Security: While ayu89 takes all reasonable steps to protect your data, account security also depends on your own actions. Use a strong, unique password for your ayu89 account, never share your login credentials with anyone, enable two-factor authentication, and contact ayu89 support immediately if you suspect any suspicious activity.

8. Cookies & Tracking Technologies

Ayu89 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored in your browser when you visit the ayu89 platform.

8.1 Types of Cookies Used

  • Essential Cookies: Required for core platform functions such as login session management, security, and navigation. These cookies cannot be disabled without affecting the basic functionality of the ayu89 platform.
  • Performance Cookies: Collects information on how you use the ayu89 platform — pages visited, time spent, and any error messages. This data is used in aggregate form to improve platform performance.
  • Functional Cookies: Saves your preferences such as language, display settings, and other configurations so you do not have to reconfigure them each time you log in to ayu89.
  • Session Cookies: Automatically deleted when you close your browser. Used to keep your active login session running while you use the platform.

8.2 Cookie Management

You can control and manage cookies through your browser settings. Most modern browsers allow you to view, block or delete cookies. Please note that disabling essential cookies may affect the functionality of the ayu89 platform and your login experience.

9. Your Rights as a Data Subject

Under Malaysia's PDPA and good data protection practices, you have several rights regarding the personal data held by ayu89. ayu89 is committed to facilitating the exercise of these rights:

Right of Access

You have the right to request a copy of the personal data we hold about you. ayu89 will provide this information within 14 business days from the date the request is received.

Right to Rectification

If your personal data held in ayu89's systems is inaccurate or incomplete, you have the right to request a correction. You can also update certain information directly from your account dashboard.

Right to Erasure

You may request the deletion of your personal data from ayu89's systems. Such requests are subject to legal retention requirements that may prevent the immediate deletion of certain data.

Right to Restriction of Processing

In certain circumstances, you may request that ayu89 restrict the processing of your data – for example, while you are disputing the accuracy of your data or awaiting the outcome of a processing objection.

Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format and to transfer that data to another data controller where applicable and technically feasible.

Right to Object

You have the right to object to the processing of your personal data for specific purposes, in particular processing for direct marketing. You may withdraw your marketing consent at any time without giving a reason.

To exercise any of the rights above, contact the ayu89 Data Protection Officer at privacy@ayu89.onl or via live chat support. Please include your account details and clearly state the right you wish to exercise. ayu89 will process your request within 14 business days.

10. Child Protection

The ayu89 platform is intended for users aged 18 and above only. ayu89 does not knowingly collect personal data from individuals under the age of 18. By registering an account with ayu89, you acknowledge and confirm that you are at least 18 years of age.

If ayu89 discovers that personal data belonging to an individual under the age of 18 has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question. Parents or guardians who become aware that their minor child has registered with ayu89 should contact us immediately at support@ayu89.onl.

Ayu89 uses age verification technology as part of the KYC process to identify and block underage users. That said, if you are a parent or guardian concerned about your child accessing online gambling platforms, please put appropriate parental controls in place at the device level and contact ayu89 support if you need any assistance.

11. Cross-Border Data Transfers

In the course of platform operations, some of your personal data may be processed or stored on servers located outside Malaysia – specifically in relation to hosting services, data backups and the international game providers used by ayu89.

In all cases of cross-border data transfers, ayu89 ensures that protections equivalent to or exceeding Malaysia's PDPA are applied through mechanisms such as contractually binding data transfer agreements, standard data protection clauses, or verification that the recipient country provides adequate data protection.

Ayu89 does not transfer your personal data to countries that lack adequate data protection without appropriate contractual safeguards in place. If you have any questions about cross-border data transfers involving your data, contact our Data Protection Officer at privacy@ayu89.onl.

12. Changes to This Privacy Policy

Ayu89 reserves the right to update this Privacy Policy from time to time to reflect changes in data processing practices, new legal requirements, or improvements in how we manage the platform. Every new version will include an updated amendment date at the top of this page.

For material changes that significantly affect how we collect or use your personal data, ayu89 will send a notice to your registered email address at least 14 days before the changes take effect. This gives you sufficient time to review the changes and take appropriate action if you do not agree.

Your continued use of the ayu89 platform after any changes to this Privacy Policy take effect will be taken as your acceptance of the revised policy. If you do not agree with the changes, you have the right to close your account and request deletion of your data in accordance with the procedure set out in Section 9.

Amendment Records: We keep a record of all previous versions of the ayu89 Privacy Policy. If you need a copy of an earlier version for reference, contact us at privacy@ayu89.onl and we will provide it within 7 working days.

13. Contact the ayu89 Data Protection Officer

Ayu89 has appointed a Data Protection Officer responsible for ensuring compliance with this Privacy Policy and Malaysia's PDPA. If you have any questions, concerns or complaints regarding how ayu89 handles your personal data, please contact us through the following channels:

Privacy Email (Data Protection Officer)
privacy@ayu89.onl
General Support (Live Chat)
Available 24/7 within the ayu89 platform
General Support Email
support@ayu89.onl
Data Request Response Time
14 business days from the date the request is received
Language of Communication
Bahasa Melayu & English

If you feel that ayu89 has not handled your complaint to your satisfaction, you have the right to escalate it to the Department of Personal Data Protection Malaysia or the relevant regulatory body. ayu89 encourages you to contact us first so we can try to resolve the matter internally.

FAQ

Privacy & Data FAQs at ayu89

Answers to the questions Malaysian members ask most about how their data is protected at ayu89

No. ayu89 never sells, rents, or trades members' personal data to any third party for their own marketing or commercial purposes. Your data is only shared with third parties that play a direct role in the platform's operations — such as Malaysian payment service providers that process your transactions, game providers that operate the games you play, and technical service providers that support ayu89's infrastructure. All these parties are bound by strict confidentiality and data protection agreements.

To submit a Subject Access Request, send an email to privacy@ayu89.onl with the subject line "Data Access Request" and include your full name, ayu89 account number, and registered email address. You may be asked to provide additional identity verification to protect your account from unauthorised access. ayu89 will provide a list of personal data held on file within 14 working days of receiving a complete request.

Yes, you may request the deletion of your personal data by contacting privacy@ayu89.onl. However, please be aware that certain data may not be immediately deletable due to legal retention requirements. For example, financial records and transaction data are required by Malaysian law to be retained for a minimum of 7 years. Data subject to these legal requirements will only be deleted once the minimum retention period has lapsed. Data not subject to such legal restrictions will be deleted within 30 days of the request being verified.

When you close your ayu89 account, data that is no longer required for operational purposes will be anonymised or deleted from the primary systems within 90 days. However, data subject to statutory retention requirements — such as financial transaction records, KYC documents, and gambling history that may be needed for legal investigations — will be retained for the minimum periods prescribed under applicable Malaysian law. During this time, access to such data is restricted to staff with a legitimate operational need only.

ayu89 analyses your gaming activity data for two main purposes: first, to detect patterns that may indicate problem gambling and to reach out with appropriate support resources as part of our responsible gambling programme; and second, to ensure compliance with anti-money laundering requirements. This analysis is not intended to exploit your habits or design game systems that "trap" you. ayu89 does not use automated profiling that makes decisions with legal or significant material effects on your rights as a player.

ayu89 employs multiple layers of protection, including 256-bit SSL encryption for all communications, encryption of data at rest in our databases, strict role-based access controls, 24/7 security monitoring, regular penetration testing by independent security experts, and a comprehensive disaster recovery programme. Our server infrastructure is also protected by modern firewalls, intrusion detection systems (IDS), and DDoS protection. In the unlikely event of a data breach involving your personal information, ayu89 is committed to notifying you within the timeframe required by law, along with details of what occurred and steps you can take to protect yourself.

Responsible Gaming at ayu89: ayu89 uses your gaming activity data in part to help you play more responsibly. Your wellbeing matters to us. If you feel that gaming is starting to have a negative impact, use ayu89's self-exclusion tools or visit the Responsible Gaming us. ayu89 is for users aged 18 and above only.

Editorial Note

Why Data Privacy Matters on an Online Betting Platform Like ayu89

When you register on any online betting platform, you are entrusting fairly sensitive information to a company you may have only just encountered. Your full name, identification number, bank account details, financial transaction history – these are all highly personal data points. The decision to register with ayu89 should be made with a clear understanding of how this data is protected and used.

At ayu89, we fully understand the weight of the trust you place in us when you register and deposit funds on our platform. That is why this Privacy Policy is more than just a legal compliance document written to satisfy minimum requirements — it is a genuine reflection of the values and practices we uphold in managing the personal data of over 500,000 Malaysian members.

One of the most common concerns among Malaysian players on online platforms is the security of their financial information. When you deposit using Touch 'n Go eWallet, GrabPay, DuitNow, or any other local payment method, your transaction data passes through several systems — from the ayu89 platform, through the payment service provider, and on to your financial institution. ayu89 ensures that at every stage within our control, your data is protected by 256-bit SSL encryption. For the portions handled by payment service providers, we only work with providers that meet recognised security standards.

Malaysia's Personal Data Protection Act 2010 (PDPA) is the legal framework governing how companies like ayu89 manage the personal data of Malaysians. PDPA compliance is not optional – it is a legal obligation. That said, ayu89 views the PDPA not merely as a checklist of minimum requirements to meet, but as a baseline that we strive to exceed. ayu89's internal data protection standards go beyond what the PDPA requires in many respects, because we believe Malaysian players deserve a higher level of protection.

Data subject rights are another area where ayu89 takes a more transparent approach than most platforms in this industry. Your right to access your personal data, correct inaccuracies, and in certain circumstances request its deletion – these are not rights we grant voluntarily alone. They are rights guaranteed under the PDPA, and ayu89 facilitates their exercise through clear channels and a timely response process.

In an era where data breaches make headlines almost every week around the world, trust that your platform takes data security seriously is paramount. ayu89 invests heavily in cybersecurity infrastructure, conducts regular penetration testing, and ensures that internal staff with access to personal data are strictly limited and properly trained. None of this comes cheap or easy, but it is an investment we believe is necessary to maintain the trust you place in us.

If after reading this Privacy Policy you still have questions or concerns, ayu89's Data Protection Officer team at privacy@ayu89.onl is ready to listen and respond. We would rather you ask and get clarity than make decisions based on incomplete information. Your privacy matters to us – not just as a legal obligation, but as a core value we uphold in every aspect of ayu89's operations.

Play at ayu89 with Complete Confidence

Your personal data is protected by 256-bit SSL encryption, full PDPA compliance, and ayu89's commitment to never selling your data to any party. Register for free today and enjoy a safe, transparent, and responsible online betting experience alongside over 500,000 Malaysian players.

  • Personal data protected with 256-bit SSL encryption
  • Full compliance with Malaysia's Personal Data Protection Act (PDPA)
  • Data is not sold to third parties for marketing purposes
  • Rights to access, correct, and delete data are fully respected
  • Privacy support can be reached at privacy@ayu89.onl

Join ayu89 with Confidence

A platform that safeguards your data, respects your privacy rights, and delivers the best online betting experience in Malaysia.

By registering, you agree to the Terms & Conditions and the ayu89 Privacy Policy.

Bahasa Melayu