Privacy Policy AJO89 – User Personal Data Protection

Welcome to the ajo89 Privacy Policy page. This document is published by ajo89 ("we", "Platform") and applies to all users who access or use ajo89 services through the ajo89.best website or our official mobile app.

We understand that your trust is our most valuable asset. That is why we invest seriously in robust security infrastructure and privacy policies. This document is written in clear, easy-to-understand language so you know exactly what happens with your data — no confusing legal jargon, no hidden terms.

This Privacy Policy explains:

• Types of personal data we collect from you
• How and why we collect that data
• How your data is used and protected
• Who can access your data
• Your rights as a data subject
• How to contact us regarding privacy matters

This Privacy Policy is to be read together with Terms and Conditions and policy Responsible Gaming ajo89, all of which together form the entire agreement between you and the platform.

Ajo89 only collects data that is strictly necessary to provide you with a safe, lawful, and quality service. The following are the categories of data we collect along with their specific purposes:

We do not collect sensitive personal data such as health information, sexual orientation, religious beliefs, or biometric data unless required by law or explicitly requested by the relevant authorities in the context of identity verification.

Your personal data is collected through several key channels as you interact with the ajo89 platform:

• Account Registration: When you complete the registration form, you voluntarily provide basic personal information such as your name, email, date of birth, and phone number.
• KYC (Know Your Customer) Process: To comply with anti-money laundering (AML) requirements, we collect copies of identification documents and proof of address during the identity verification process.
• Financial Transactions: Bank account details and deposit and withdrawal records are collected when you carry out any financial transaction on the platform.
• Platform Usage: Technical and usage data is collected automatically via cookies, server logs, and similar tracking technologies as you browse and use the platform.
• Support Interactions: When you contact our support team via live chat or email, records of those communications are retained for service quality and future reference purposes.
• Authorised Third Parties: In certain cases, we may receive data from approved third-party identity verification providers for KYC and age verification purposes.

Every piece of data we collect is used for a specific and legitimate purpose. ajo89 will not use your data for any purpose other than those stated here without obtaining your additional consent:

• Account Management: To create, verify, and manage your account on the ajo89 platform securely.
• Transaction Processing: To process deposits, withdrawals, and all financial transactions you make accurately and promptly.
• Identity Verification (KYC/AML): To comply with legal requirements relating to identity verification and anti-money laundering applicable to online gaming platforms.
• Customer Support: To provide assistance and resolve any inquiries, technical issues, or complaints you submit to our support team.
• Platform Security: To detect and prevent fraud, unauthorized access, system exploitation, and any activity that violates the platform's terms of use.
• Service Improvement: To analyze aggregated and anonymized usage data to improve platform performance, user experience, and new product offerings.
• Marketing Communications: To send information about promotions, special offers, and platform updates — only if you have given explicit consent to receive it.
• Legal Compliance: To fulfill legal obligations, regulations, and regulatory directives applicable to ajo89.

The legal basis for our data processing includes contractual compliance (for service provision), legal obligations (for KYC/AML), legitimate interests (for security and fraud prevention), and consent (for marketing communications).

Ajo89 does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. However, there are limited situations where we may need to share your data with certain parties:

• Payment Service Providers: To process deposit and withdrawal transactions, the necessary financial data is shared with payment gateway providers such as FPX, Touch 'n Go, and GrabPay, who have signed confidentiality agreements with us.
• KYC Service Providers: Identity data is shared with approved third-party identity verification service providers for KYC verification purposes only.
• Game Providers: Minimum required data is shared with our game software providers to enable you to access and play the games available on the platform.
• Legal Authorities: ajo89 will disclose data when required by law, court order, or a legitimate request from law enforcement agencies.
• Professional Advisors: Our lawyers, accountants, or auditors may access certain data when required to provide professional advice, subject to confidentiality obligations.

Protecting your personal data is our primary responsibility. ajo89 implements multiple layers of technical and organizational security to prevent unauthorized access, loss, modification, or disclosure of data:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and ajo89 servers is encrypted using the latest SSL/TLS protocols to protect data in transit.
• Data Encryption at Rest: Sensitive data stored in our databases is encrypted using AES-256 encryption algorithms for additional protection.
• Two-Factor Authentication (2FA): ajo89's internal systems require two-factor authentication for all staff access to sensitive user data.
• Role-Based Access Control: Only employees who require access to specific data to perform their duties are granted such permission. The principle of "least privilege" is strictly observed.
• 24/7 Security Monitoring: Automated monitoring systems operate around the clock to detect any suspicious activity or intrusion attempts on our systems.
• Periodic Penetration Testing: We conduct regular security testing and vulnerability assessments by independent cybersecurity experts.
• Employee Training: All ajo89 staff who handle user data undergo rigorous data protection training and sign confidentiality agreements.

While we take all reasonable steps to protect your data, no system is 100% immune to cyber threats. Should a security incident involving your data occur, we will notify you promptly and take the necessary remedial action.

Ajo89 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy or as required by applicable Malaysian law.

• Active Account Data: Retained for as long as your account is active and you continue using ajo89's services.
• KYC Data and Identity Documents: Retained for a minimum of 5 years after account closure or the last transaction, in line with Malaysia's AML legal requirements.
• Financial Transaction Records: Retained for a minimum of 7 years after the transaction date for accounting, tax, and legal compliance purposes.
• Communication and Support Logs: Retained for 3 years from the date of the last interaction for reference and dispute resolution purposes.
• Technical Data and Usage Logs: Retained for 13 months for analytics and security purposes, then deleted or anonymised.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold about you:

• Right of Access: You have the right to request a copy of the personal data we hold about you. We will provide this information within 21 days of receiving a valid request.
• Right to Rectification: If your data is inaccurate or outdated, you have the right to request that we correct or update it. You may also update certain information directly through your account settings.
• Right to Erasure: You may request the deletion of your personal data under certain circumstances, such as when the data is no longer needed for its original purpose or when you withdraw your consent.
• Right to Restrict Processing: In certain situations, you have the right to request that we restrict how we process your data while a dispute or issue is being resolved.
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time, and we will immediately cease using your data for that purpose.
• Right to Withdraw Consent: For processing based on your consent (such as marketing communications), you may withdraw your consent at any time through your account settings or by contacting us.

To exercise any of the above rights, please contact the ajo89 privacy team by email at [email protected] by clearly stating your request along with proof of identity. All requests will be processed within the timeframe stipulated by the PDPA.

Ajo89 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions properly. The following are the types of cookies we use:

• Essential Cookies: These cookies are required for core platform functions such as login session authentication, security, and navigation. The platform cannot function properly without them. These cookies cannot be disabled.
• Performance & Analytics Cookies: We use analytics tools to collect aggregated usage data to understand how users interact with the platform, which pages are visited most frequently, and where users encounter difficulties. This data helps us improve the overall platform experience.
• Functional Cookies: These cookies remember your preferences and settings, such as your preferred language and display preferences, to provide a more personalized experience.
• Session Cookies: Temporary cookies that are automatically deleted when you close your browser. They are used to maintain your active session while browsing the platform.

You can manage your cookie preferences through your web browser settings. However, disabling certain cookies may affect platform functionality and your user experience. Cookie management instructions vary by browser — please refer to your browser's help documentation for specific guidance.

In the course of its operations, ajo89 may need to transfer your personal data to servers or service providers located outside Malaysia. Any international data transfers carried out by ajo89 are subject to the following safeguards:

• Transfers are only made to countries or entities with data protection standards equivalent to or exceeding Malaysia's PDPA.
• Legally binding data transfer agreements are signed with all overseas data recipients.
• Data encryption is maintained during and after international data transfers.
• We do not transfer data to parties that cannot provide adequate data protection guarantees.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, the ajo89 privacy team is here to help.

You can reach us through the following channels:

• Privacy Email: [email protected] — For all personal data and privacy-related enquiries
• Live Chat: Available 24/7 via the chat icon at the bottom corner of the platform
• Help Centre: Visit FAQ page us for answers to frequently asked questions about privacy and data security

Our team is committed to responding within 2 business days for all privacy-related enquiries. For formal data subject rights requests (such as data deletion or access), the response period is within 21 days in accordance with PDPA requirements.

Ajo89 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. Any material amendments will be communicated to you via your registered email or in-platform notification before the changes take effect.