Official Documents

Grab89 Privacy Policy – Personal Data Protection

Your privacy is our priority. Grab89 is committed to protecting every piece of personal information you share with us. This document clearly and transparently explains how your data is collected, used, stored and protected on our platform.

Last updated: January 2026
Our Commitment

Why Your Data Is Safe with Grab89

Six core privacy protection principles we practise every day to ensure members' personal data remains secure at all times

256-bit SSL Encryption

All data transmitted between your browser and Grab89's servers is protected by industry-standard 256-bit SSL encryption. Your login credentials, payment details, and personal data remain inaccessible to unauthorised parties.

No Sale of Data to Third Parties

Grab89 has never and will never sell, rent, or transfer members' personal data to any third party for marketing or commercial purposes without the member's explicit prior consent.

Full Control in Your Hands

As a Grab89 member, you have the right to access, correct, download, and request deletion of your personal data at any time through our support team, available 24/7.

Malaysia PDPA Compliance

Grab89's Privacy Policy is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We handle your personal data in full compliance with applicable Malaysian legal requirements.

Secure & Trusted Servers

Grab89 member data is stored in data centres equipped with multi-layered physical and digital protection. Database access is granted only to authorised personnel under strict controls.

Data Breach Notification

In the event of a data breach affecting your personal information, Grab89 will notify you and the relevant authorities within the timeframe required under Malaysian law.

Privacy Notice: This Privacy Policy describes Grab89's data protection practices and applies to all information you provide or that we collect when you use the grab89.my platform. By registering for and using Grab89's services, you agree to the terms of this Privacy Policy.

1Information We Collect

Grab89 collects your personal data through various channels to enable us to provide the best, most secure and personalised experience for every member. Below are the categories of information we collect:

Data Category Example Information Purpose of Collection
Identity Information Full name, date of birth, MyKad/passport number Identity verification (KYC), fraud prevention
Contact Information Email address, phone number, residential address Account communications, transaction notifications
Financial Information Bank account numbers, deposit/withdrawal transaction records Payment processing, financial auditing
Usage Data Game records, betting history, activity logs Service improvement, fraud detection
Technical Data IP address, browser type, operating system, device Security, prevention of unauthorised access

Grab89 only collects data that is strictly necessary for the stated purposes. We do not collect sensitive personal data such as medical information, religious beliefs, or political affiliations of our members.

All information you provide to Grab89 must be accurate, complete, and up to date. If any of your personal details change, please update your account or contact our support team promptly.

2How We Use Your Data

Grab89 uses collected personal data solely for legitimate purposes directly related to the provision of our betting platform services. The primary purposes for which your data is used are as follows:

  • Account Management — to create, verify, and maintain your Grab89 member account, including the required KYC (Know Your Customer) process
  • Transaction Processing — handling deposits via Touch 'n Go eWallet, GrabPay, DuitNow, FPX and other local Malaysian payment methods, as well as processing withdrawals
  • Service Provision — giving you access to slots, Live Casino, poker, blackjack, Sports Betting, badminton, and virtual sports on the Grab89 platform
  • Security & Fraud Prevention — to detect and prevent suspicious activity, money laundering, or platform abuse
  • Service Communications — sending you account notifications, transaction confirmations, promotional updates and service-related information
  • Responsible Gaming — monitoring usage patterns to identify members who may need support related to problem gambling
  • Platform Improvements — analysing aggregate usage data to improve user experience, platform performance and new features
  • Legal Compliance — fulfilling legal and regulatory obligations applicable to Grab89 under Malaysian law

Grab89 does not use your personal data to make automated decisions that significantly affect your rights or interests without human oversight. All important decisions relating to your account are reviewed by our team.

3Information Sharing

Grab89 upholds a strict confidentiality policy. We do not share your personal data with external parties except in the situations outlined below, and only to the extent necessary for the relevant purpose:

  • Payment Service Providers — local payment platform providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, and Malaysian banks that process your financial transactions. They receive only the data necessary to complete the payment.
  • Game Technology Providers — companies that supply live casino, slots and virtual sports gaming software to Grab89. All such providers are bound by strict confidentiality agreements.
  • Statutory Authorities — Malaysian government agencies or law enforcement bodies when required to do so by law, court order or to prevent fraud and money laundering.
  • Auditors & Professional Advisors — law firms, accountants, and auditors bound by strict professional confidentiality obligations in the course of their duties.

Grab89 ensures that all third parties receiving member personal data are bound by data protection agreements aligned with Malaysia's PDPA 2010. These third parties are not permitted to use the data for any purpose other than those specified in the agreement.

4Cookies & Tracking Technologies

Grab89 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

  • Essential Cookies — required for core Grab89 platform functions such as login, session authentication, and security. These cookies cannot be disabled as the platform cannot function without them.
  • Performance Cookies — collecting information about how you use the Grab89 platform, such as the most frequently visited pages and error messages encountered. This data is used to improve platform performance.
  • Functional Cookies — remembering your preferences such as preferred language, region and display settings to deliver a more personalised experience.
  • Analytics Cookies — helping Grab89 understand aggregate user behaviour through internal analytics tools for continuous improvement purposes.

You can manage your cookie settings through your web browser. However, disabling certain cookies may affect the functionality and your experience on the Grab89 platform. Grab89 session cookies will expire automatically when you log out or close your browser.

5Data Security

Grab89 implements multiple layers of technical and organisational security measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction. Our key security measures include:

  • 256-bit SSL/TLS encryption for all data transmissions between you and Grab89 servers
  • Role-based access control (RBAC) systems ensuring that only authorised personnel can access members' personal data
  • 24/7 security monitoring and real-time threat detection systems
  • Regular data backups at redundant data centres protected with multi-layered physical security
  • Regular security audits by independent third parties to identify and address system vulnerabilities
  • Mandatory data protection training for all Grab89 staff who handle personal data

While Grab89 takes comprehensive security measures, no system can guarantee absolute security. You are also responsible for keeping your login credentials safe. Do not share your Grab89 account password with anyone.

6Your Rights

As a Grab89 member and data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data:

Right of Access

You have the right to request a copy of the personal data we hold about you at any time.

Right to Rectification

You may request the correction of any inaccurate or incomplete personal data held in our records.

Right to Erasure

You may request the deletion of your personal data, subject to applicable legal obligations.

Right to Object

You may object to the processing of your personal data for direct marketing purposes at any time.

Right to Portability

You have the right to receive your personal data in a machine-readable format for transfer to another provider.

Right to Restrict Processing

You may request that we restrict how we process your data under certain circumstances permitted by law.

To exercise any of the rights above, please contact the Grab89 support team via email at support@grab89.my or via live chat. Grab89 will process your request within 14 business days from the date the application is received.

7Data Retention & Deletion

Grab89 retains your personal data only for as long as necessary to fulfil the original purpose of collection or to comply with applicable legal obligations. Our data retention policy is as follows:

  • Active Account Data — retained for the duration your account remains active on the Grab89 platform, plus 7 years after account closure for financial audit and legal compliance purposes
  • Transaction Records — retained for a minimum of 7 years in accordance with Malaysia's financial and tax regulatory requirements
  • Security Logs — retained for 12 months for investigation purposes in the event of any security incident
  • Marketing Data — retained until you withdraw your consent to receive marketing communications from Grab89
  • KYC Data — retained for 5 years after the business relationship with Grab89 ends, in accordance with anti-money laundering requirements

Once the retention period has ended, your personal data will be securely deleted or anonymised so that it can no longer be linked to you personally.

8Children's Privacy

The Grab89 platform is strictly for users aged 18 years and above only. Grab89 does not accept registrations from individuals under the age of 18 and does not knowingly collect personal data from minors.

Should Grab89 discover that personal data from a minor has been collected without our knowledge, we will take the following steps immediately:

  • Suspending the account immediately while an investigation is carried out
  • Delete all personal data collected in relation to the individual
  • Return any remaining account balance to its original funding source

If you believe someone under the age of 18 has registered an account on Grab89, please contact us immediately at support@grab89.my so that immediate action can be taken.

9Privacy Policy Changes

Grab89 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our business practices, legal requirements or technological advancements. When significant changes occur, we will:

  • Displaying a clear notice on the Grab89 platform homepage
  • Send notification emails to all registered members at least 14 days before changes take effect
  • Update the "Last Updated" date at the top of this document
  • Retain previous versions of the Privacy Policy for reference by members who require them

Continued use of the Grab89 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, please discontinue use of the platform and contact us to close your account.

10Contact Us

If you have any questions, concerns or complaints regarding Grab89's Privacy Policy or the way we handle your personal data, please contact our Data Protection Officer through the following channels:

  • Privacy Email: support@grab89.my
  • Live Chat: Available 24/7 on the Grab89 platform
  • Service Language: Bahasa Melayu and English

We are committed to handling every privacy enquiry seriously and will respond within 3 business days. For more complex matters, we will provide an update within 14 business days.

If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory body under the Ministry of Communications and Digital Malaysia.

For urgent security matters such as unauthorised access to your account, please contact us via live chat for immediate assistance. The Grab89 security team operates 24 hours a day, 7 days a week.

Related Documents

Grab89 Policies & Other Information

Read these important documents to fully understand how Grab89 operates in your best interest

Your Data Is Safe. Join Grab89 With Confidence

Grab89 safeguards your privacy with the highest security standards. Register your account today and enjoy a safe, fair, and fun online betting experience alongside over 500,000 members across Malaysia.

Responsible Gaming Reminder

All betting activity on Grab89 is for entertainment purposes only and should not be regarded as a source of regular income. This platform is intended for users aged 18 and above who are residents of Malaysia. If you or someone you know needs help with a gambling-related issue, please call Talian Kasih 15999 (free, 24 hours). By using the Grab89 platform, you agree to this Privacy Policy and Terms & Conditions us. Learn more about Responsible Gaming at Grab89.

Bahasa Melayu