MH789 Privacy Policy – Personal Data Protection for Malaysia Members

1Privacy Policy Introduction & Scope

This Privacy Policy ("Policy") is issued by MH789 ("we", "the platform", "MH789") and applies to all users, visitors, and registered members who access or use our online sports betting and casino platform at mh789.ws and related applications.

MH789 recognises that privacy is more than a legal obligation — it is a fundamental right of every individual. We built this platform with a privacy-first approach, meaning data protection is considered from the ground up at the design stage, not added as an afterthought. Every data-related decision we make is always weighed against the best interests and safety of our members.

By using the MH789 platform, you agree to the terms set out in this Privacy Policy. This policy should be read together with MH789 Terms & Conditions which forms part of your overall agreement with us.

2Types of Personal Data We Collect

MH789 collects the personal data necessary to deliver our services safely and effectively. The following are the categories of data we collect:

3How We Collect Personal Data

Your personal data is collected through various channels as you interact with the MH789 platform:

A. Directly from You

• During the new account registration process at MH789.
• When you complete the identity verification (KYC) form for compliance purposes.
• When you make a deposit or withdrawal using Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX via Maybank2u or CIMB Clicks.
• When you contact the MH789 customer support team via live chat or email.
• When you complete a feedback form, participate in a survey, or take part in a promotion.

B. Automatically

• Technical data such as IP address, browser type, and device information is collected automatically when you visit our website.
• Cookies and similar technologies record your preferences and platform usage patterns.
• Our system automatically records all betting activity, game outcomes, and financial transactions for security and compliance purposes.

4Purposes for Using Personal Data

MH789 uses collected personal data for legitimate and specific purposes. We do not use your data for any other purpose without prior notice and your consent. The following are the primary purposes for data use:

• Account Management: Creating, verifying, and managing your MH789 member account, including the login process, balance checks, and activity tracking.
• Transaction Processing: Securely and accurately processing deposits and withdrawals through your preferred local payment methods.
• Identity Verification (KYC): Meeting anti-money laundering (AML) compliance requirements and verifying that all members meet the minimum age of 18.
• Customer Support: Providing effective assistance and resolution for member enquiries and complaints.
• Platform Security: Detecting and preventing fraud, hacking, account abuse, and illegal activity on the platform.
• Service Communications: Sending important account notifications, promotions you have subscribed to, and updates to our terms of service.
• Platform Improvements: Analyses usage patterns in aggregate (not at an individual level) to improve the interface, speed, and overall experience of the MH789 platform.
• Legal Compliance: To fulfil reporting and compliance obligations required under applicable Malaysian law.

5Data Sharing with Third Parties

MH789 does not sell or disclose members' personal data to third parties for commercial purposes. However, there are limited situations where we need to share data to keep our services running:

Trusted Service Providers

We work with carefully selected third-party service providers for the following purposes:

• Payment Processing: Payment gateway providers to process transactions via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, and FPX. They receive only the data necessary for transaction processing.
• Identity Verification: Licensed third-party KYC service providers used to verify member identity documents for AML compliance.
• Gaming Software: Live casino and slots platform providers used on MH789 — they are bound by strict confidentiality agreements.
• Technical Infrastructure: Cloud and hosting service providers that store data in ISO 27001-certified data centres.

Legally Required Disclosures

MH789 may be required to disclose your personal data to Malaysian government authorities where mandated by a court order, warrant, or other legal requirement. We will endeavour to notify you of any such request unless prohibited from doing so by law.

6Data Security Measures

MH789 invests seriously in infrastructure and data security. The following technical and organisational measures are in place to protect your personal data:

• Data Encryption: All data in transit is protected by 256-bit SSL/TLS encryption. Data stored in our databases is also encrypted using AES-256.
• Access Controls: Only MH789 staff who require access to specific data to carry out their duties are permitted to do so — the principle of least privilege is strictly observed.
• Two-Factor Authentication: All MH789 staff who access internal systems are required to use two-factor authentication. Members are also encouraged to enable this feature on their accounts.
• Continuous Monitoring: Threat monitoring and anomaly detection systems operate 24/7 to identify and respond to any suspicious activity.
• Regular Security Audits: Vulnerability assessments and penetration testing are conducted periodically by independent security experts.
• Staff Training: All MH789 staff who handle personal data receive regular privacy and security training.

7Data Retention Period

MH789 retains your personal data only for as long as necessary for the purposes outlined in this Privacy Policy, or as required under Malaysian law. The data retention guidelines are as follows:

• Active Account Data: Retained for the duration that your MH789 account remains active.
• Financial Transaction Data: Retained for a minimum of 7 years after the transaction date, in line with Malaysia's financial reporting and AML requirements.
• KYC and Identity Verification Data: Retained for a minimum of 5 years after account closure in accordance with compliance requirements.
• Communication Records Data: Customer support communication records are retained for 2 years for quality assurance and dispute reference purposes.
• Technical Data (Logs): System and access logs are retained for 90 days for security and debugging purposes.

When data is no longer required, it will be securely deleted or anonymised using industry-recognised methods to ensure it cannot be recovered.

8Your Rights as a Data Subject

Under Malaysia's PDPA 2010 and MH789's internal policies, you have the following rights regarding your personal data:

9Cookies & Tracking Technologies

MH789 uses cookies and similar tracking technologies to enhance your experience on the platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, user sessions, and security. Cannot be disabled.
• Preference Cookies: Saves your preferences such as display language and display settings to streamline your experience on the platform.
• Analytics Cookies: Collecting aggregated information about how you use the platform to help us understand and improve website performance.
• Security Cookies: Helps us detect fraudulent activity and protect your account from unauthorised access.

You can manage or delete cookies through your browser settings. However, disabling essential cookies may affect the functionality of the MH789 platform. Analytical cookies can be disabled without impacting your use of the platform.

10Cross-Border Data Transfers

In the course of platform operations, MH789 members' personal data may be processed or stored on servers located outside Malaysia, including in countries such as Singapore or European Union member states that maintain robust data protection laws.

MH789 ensures that any cross-border data transfers are carried out with adequate safeguards through:

• Data processing agreements incorporating internationally recognised standard contractual clauses for data protection.
• Use of cloud service providers holding internationally recognised data security certifications (ISO 27001, SOC 2).
• Privacy risk assessments prior to any data transfer.

11Children's Privacy

The MH789 platform is intended solely for individuals aged 18 years of age and above. We do not knowingly collect or process personal data from individuals under the age of 18.

Should we discover that we have inadvertently collected personal data from an underage individual, the relevant account will be terminated immediately and the data will be deleted within 7 business days.

12Changes to the Privacy Policy

MH789 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. The latest version of this Privacy Policy will always be available on this page with a clear date of update.

For changes considered material — such as updates to how we use your data or new rights available to you — MH789 will notify you via:

• Notifications displayed on the MH789 platform homepage.
• Via email to the address registered on your account, at least 14 days before the changes take effect.

Your continued use of the MH789 platform after any Privacy Policy changes take effect will be considered your acceptance of those changes.

13Contact the Data Protection Officer

MH789 has appointed a Data Protection Officer (DPO) responsible for ensuring our compliance with the PDPA and our privacy policies. If you have any questions, concerns, or complaints regarding the Privacy Policy or the handling of your personal data, please contact:

You also have the right to lodge a complaint with Department of Personal Data Protection (PDPD) Malaysia if you are not satisfied with how MH789 has handled your complaint.

Related documents: Terms & Conditions  |  Responsible Gaming  |  FAQ