Privacy Policy 789bat — Your Personal Data Protection

01 Introduction

Welcome to the Privacy Policy 789bat. This document is the official statement on how 789bat Entertainment Group ("we", "789bat") handles the personal data of all users accessing our platform at 789bat.pw and all related services.

We understand that your trust is the most valuable asset we must safeguard. We are therefore committed to handling your personal data with the highest level of care, transparency, and accountability — in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international standards.

By using the 789bat platform, you agree to the data collection and usage practices as described in this document. If you do not agree with any part of this policy, you are requested not to use our platform.

02 Personal Data We Collect

789bat collects various types of personal data depending on how you interact with our platform. Below is a detailed breakdown of the categories of data we collect:

03 How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. 789bat uses your personal data for the following purposes:

• Account management: Creating, verifying, and maintaining your account so your gaming experience runs smoothly at all times.
• Transaction processing: Processing deposits, withdrawals, and all financial transactions related to your account securely and accurately.
• Identity verification (KYC): Fulfilling legal obligations including age verification, anti-money laundering (AML) compliance, and adherence to financial regulations.
• Platform security: Detecting and preventing fraud, unauthorised access, account abuse, and other suspicious activities.
• Customer support: Helping you resolve issues, answer enquiries, and improve our service quality based on your feedback.
• Relevant marketing: Sending promotional information, bonus offers, and platform updates — only to users who have consented to receive them.
• Responsible gaming: Monitoring gaming patterns to identify and assist players who may need responsible gaming support.
• Continuous improvement: Analysing usage data in aggregate and anonymised form to improve platform performance, design, and functionality.

We will not use your data for any purpose not stated in this policy without obtaining your consent first.

04 Data Sharing with Third Parties

789bat does not sell, rent, or trade your personal data to any third party. However, there are limited situations where we need to share certain information with trusted parties:

• Payment providers: Required transaction information is shared with payment gateway providers such as DuitNow, FPX, and e-wallet providers to process your deposits and withdrawals.
• KYC service provider: Identity verification data is shared with accredited KYC partners for document verification and basic background checks.
• Competent authorities: In situations required by law, we will disclose information requested by authorities such as Bank Negara Malaysia, the Royal Malaysia Police or a court of law pursuant to a valid order.
• Technical service provider: Companies that assist us in operating our technical infrastructure, analytics, and cybersecurity — all bound by strict confidentiality agreements.
• Business transfer: In the event of a merger, acquisition, or asset sale, user data may be transferred as part of that transaction — with equivalent protections maintained.

05 Data Security Measures

Protecting your personal data is our technical and operational priority. 789bat implements multiple layers of defence to ensure the security of your information:

• 256-bit SSL/TLS encryption: All data communications between your device and 789bat's servers are encrypted using industry-grade security protocols.
• Two-factor authentication (2FA): An additional security layer for account access that is available and strongly recommended for all members.
• Real-time monitoring: An automated monitoring system operating 24/7 to detect any suspicious activity or unauthorised access attempts.
• Encrypted password storage: Your password is stored in hashed form using modern cryptographic algorithms — we cannot read your password ourselves.
• Internal access control: Only staff with a legitimate business need are granted access to user data, and every access is logged.
• Regular security audits: Our systems undergo regular penetration testing and security audits by independent third parties to identify and address any vulnerabilities.
• Certified data centres: Your data is stored in data centres with internationally recognised security certifications, supported by backup systems that ensure continuity of service.

06 Cookies, Tracking Technologies & Analytics

789bat uses cookies and similar tracking technologies to enhance the user experience and understand how our platform is used. The following are the types of cookies we use:

• Essential cookies: Required for core platform functions such as login, game sessions and security. These cookies cannot be disabled.
• Performance cookies: Collecting data on how users interact with the platform to help us identify technical issues and improve performance.
• Functional cookies: Saving your preferences such as language, region, and display settings so you do not need to reset them every time you log in.
• Analytics cookies: Used to understand overall usage patterns to help us make better product improvement decisions.

You can manage your cookie settings through your browser at any time. Please note that disabling certain cookies may affect the functionality of some parts of the platform.

07 Your Rights Regarding Personal Data

Under the Malaysia PDPA and our privacy policy, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact our data protection team via email at [email protected]. We will process your request within 14 business days.

08 Data Retention & Deletion

789bat does not retain your personal data longer than necessary for the purposes stated in this policy. General retention periods are as follows:

• Active account data: Retained for the duration your account is active and for 5 years after account closure to meet audit and legal requirements.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's financial and tax legal requirements.
• KYC and identity verification data: Retained for 5 years after the termination of the business relationship in accordance with applicable AML/CFT requirements.
• Customer support communication logs: Retained for 3 years for reference and service improvement purposes.
• Marketing data: Deleted within 30 days after you withdraw consent for marketing communications.

Once the retention period expires, your data will be permanently deleted or anonymised so that it can no longer be associated with you.

09 Cross-Border Data Transfer

As an online platform operating globally, some of your personal data may be processed or stored on servers located outside Malaysia. In such cases, 789bat ensures that:

• All cross-border data transfers are conducted only to countries or regions with an equivalent or higher level of data protection.
• Appropriate data transfer agreements, including standard contractual clauses, are in place with all data recipients outside Malaysia.
• Additional technical measures such as end-to-end encryption are applied during cross-border data transfer processes.

10 Children's Privacy

The 789bat platform is strictly intended for individuals aged 18 years and above. We do not intentionally collect, store or process personal data of children under the age of 18.

Should we discover that personal data of an underage individual has been collected without our knowledge, we will take immediate action to delete that data and close the associated account. Any related deposits will be refunded in accordance with established procedures.

If you are a parent or guardian who believes your child has registered on our platform, please contact us immediately via [email protected] so that we may take appropriate action.

11 Privacy Policy Amendments

789bat reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements or technological developments. Any material amendments will be communicated to you via:

• In-app or on-site notifications.
• Email notification to the address registered with your account.
• Update the "Last Updated" date at the top of this document.

Your continued use of the 789bat platform after any policy amendments are published will be deemed as your acceptance of the latest version of this Privacy Policy. We encourage you to review this page periodically.

12 Contact Our Data Protection Officer

If you have any questions, concerns, or complaints about how we handle your personal data, we encourage you to reach out to us directly. The 789bat Data Protection Team is here to assist you.

You also have the right to lodge a complaint with the Department of Personal Data Protection Malaysia if you believe your rights under the PDPA have been violated. Further information is available on the official website of the Ministry of Communications and Digital Malaysia.