This Privacy Policy ("Policy") describes how atm889 ("Platform", "we") handles your personal data when you use the website atm889.pro and all related services. We take your privacy very seriously and operate in compliance with the Personal Data Protection Act 2010 (PDPA) Malaysia.
By registering an account or using the atm889 platform, you give us consent to collect and process your personal data as described in this document. If you do not agree with any part of this policy, please discontinue use of the platform and contact us to close your account.
Privacy Policy Contents
Atm889 Privacy Commitment
Privacy is not merely a legal obligation for us — it is a responsibility we take seriously toward every member. Here are the six core pillars of our approach to data protection.
High-Level Encryption
All personal data and financial transactions are protected using SSL 256-bit encryption. Your information cannot be intercepted or read by unauthorised parties during transmission.
PDPA 2010 Compliance
Atm889 operates in compliance with Malaysia's Personal Data Protection Act 2010. All data processing is carried out on a lawful basis with a clear purpose and with your consent.
No Data Selling
Atm889 has never and will never sell, rent, or trade your personal data to any third party for marketing or commercial purposes without your explicit consent.
Personal Data Controls
You have the full right to access, correct, or request deletion of your personal data at any time. We process such requests within 14 business days.
Secure Data Storage
Your data is stored on servers protected by multiple firewall layers, with access restricted to authorised personnel only. Data backups are performed regularly to ensure security.
Breach Notification
In the event of any data security breach that may affect your information, ATM889 will notify you within 72 hours and take immediate remedial action.
1 Information We Collect
Atm889 collects several categories of personal data from you during registration, platform use, and interactions with our support team. This data collection is necessary to enable us to provide a safe, fair, and responsible service to all members.
a) Information You Provide Directly:
- Full name, date of birth, and identification card number (for KYC identity verification).
- Email address, phone number, and residential address.
- Payment method details including bank account numbers and e-wallet information.
- Identity verification documents such as a copy of your national ID, bank statement, or utility bill.
- Any communications you send to us via live chat, email, or other support channels.
b) Information Collected Automatically:
- Your IP address, device type, operating system, and browser version.
- Session log data including login time, session duration, and in-platform activity.
- Wagering records, game history, and financial transactions.
- Cookie data and similar tracking technologies to enhance user experience.
- Approximate geolocation data (state or city) based on IP address.
All data collection is carried out transparently and solely for the purposes stated in this policy. We do not collect more data than is necessary to provide our services.
| Data Categories | Example | Primary Purpose |
|---|---|---|
| Identity | Name, IC, date of birth | KYC verification, fraud prevention |
| Contact | Email, phone, address | Account communications, notifications |
| Finance | Bank, e-wallet, transactions | Deposit & withdrawal processing |
| Technical | IP, device, session logs | Security, troubleshooting |
| Games | Betting history, wins | Responsible gaming, audit |
2 How We Use Your Data
Atm889 uses your personal data only for lawful and necessary purposes. Every use of data has a clear justification, whether based on your consent, contractual necessity, legal obligation, or the platform's legitimate interests.
- Account Management: Creating and maintaining your account, processing registration, and verifying your identity through the KYC process.
- Transaction Processing: Processing deposits, withdrawals, and all financial transactions securely and accurately.
- Platform Security: Detecting and preventing fraud, money laundering, bot activity, and other security threats that could compromise platform integrity.
- Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and reach out to you if necessary, as well as enforcing the limits you have set yourself.
- Service Communications: Sending important notifications regarding your account, transactions, terms changes, and security alerts.
- Customer Support: Handling enquiries, complaints, and disputes you submit to our support team.
- Marketing (with consent): Sending promotional information, bonuses, and the latest offers where you have consented to receive marketing communications.
- Legal Compliance: Meeting reporting obligations to the relevant authorities as required by law.
3 Data Storage and Protection
Atm889 implements comprehensive technical and organisational measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure.
Technical Measures:
- 256-bit SSL/TLS encryption for all communications between your device and atm889 servers.
- Encryption at rest for all sensitive information including financial data.
- Multi-layered firewall system and intrusion detection (IDS/IPS) active 24/7.
- Role-based access control (RBAC) — only staff with a legitimate business need may access your data.
- Regular access log audits to detect any suspicious activity.
Data Retention Period:
- Active account data is retained for as long as your account remains active and for 7 years after account closure, in accordance with anti-money laundering legal requirements.
- Financial transaction records are retained for a minimum of 7 years in accordance with financial reporting and audit requirements.
- Customer support communication logs are retained for 3 years for dispute resolution purposes.
- Technical data and server logs are retained for 12 months before being securely deleted.
4 Data Sharing with Third Parties
Atm889 does not share your personal data with third parties for their own marketing purposes. However, there are limited situations where we need to share your data to allow the platform to operate safely and lawfully:
- Payment Providers: Financial data required to be shared with payment service providers (DuitNow, FPX, e-wallets) to process your transactions. All such providers are subject to strict data protection agreements.
- Game Providers: Data required to be shared with game software providers to ensure game integrity and the security of your account during play.
- KYC Services: Identity verification data is shared with trusted KYC service providers to authenticate your documents.
- Authority: atm889 is required to disclose your data to government authorities, law enforcement, or regulatory bodies when mandated by Malaysian law.
- Technical Services: Hosting, cybersecurity, and analytics providers that help us operate the platform — all bound by confidentiality agreements.
All third parties with whom we share data have undergone a thorough security assessment process and are required to comply with ATM889's data protection standards. We are not responsible for the privacy practices of third-party websites that may be linked within our platform.
5 Cookies and Tracking Technologies
Atm889 uses cookies and similar tracking technologies to enhance your experience, ensure account security, and understand how our platform is used. The following are the types of cookies we use:
| Cookie Types | Purpose | Duration |
|---|---|---|
| Essential Cookies | Login session verification and basic platform security | Session only |
| Functional Cookies | Saving language preferences, display settings, and account configurations | 30 days |
| Analytics Cookies | Understanding usage patterns to improve the platform | 90 days |
| Security Cookies | Detecting suspicious activity and preventing fraud | 7 days |
You can manage cookie settings through your browser. However, disabling essential cookies may affect core platform functions on atm889, including the ability to log in to your account.
6 Your Rights as a User
Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by atm889. We are committed to processing every request within a reasonable timeframe.
Right of Access
Request a copy of all personal data we hold about you in a readable format.
Right to Rectification
Request correction of inaccurate or incomplete data in your atm889 account.
Right to Erasure
Request deletion of your data when it is no longer necessary, subject to legal obligations.
Right to Object
Object to the processing of your data for marketing purposes or in certain specific situations.
Right to Data Portability
Receive your data in a structured, reusable format for transfer to another platform.
Right to Restrict Processing
Request that we restrict the processing of your data under certain circumstances while a dispute is being resolved.
To submit any request regarding your privacy rights, please contact the ATM889 data protection team via our platform's live chat. We will acknowledge receipt of your request within 3 business days and resolve it within 14 business days.
7 Privacy Policy Amendment
Atm889 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or new platform features. We are committed to notifying you of any material changes.
- Major changes to this policy will be communicated via in-platform notifications and your registered email at least 14 days before taking effect.
- Minor updates such as language corrections or additional clarifications may be made without special notice, but the "Last Updated" date will be revised accordingly.
- Continued use of the atm889 platform after a change takes effect constitutes acceptance of the updated policy.
- You can bookmark this page and check back regularly to stay informed about how we handle your data.
If you have any privacy-related queries, concerns, or complaints that our support team is unable to resolve, you have the right to file a complaint with the Department of Personal Data Protection Malaysia (JPDP) under the Ministry of Digital.