Horse89 takes the privacy of every Malaysian player seriously. This Privacy Policy explains clearly and completely what personal data we collect, why we collect it, how we use and protect it, and what rights you hold over that data at all times.
This Privacy Policy ("Policy") is issued by Horse89 ("we", "us", "our", "Horse89") and applies to all personal data collected from individuals ("you", "User", "Player") who access, register on, or otherwise interact with the horse89 online gaming and sports betting platform, available at https://horse89.cam, and any associated mobile applications, services, or communications channels (collectively, the "Platform").
Horse89 is committed to safeguarding the privacy and personal data of all players across Malaysia — from Kuala Lumpur and Petaling Jaya to Penang, Johor Bahru, and Shah Alam. This Policy explains in plain, accessible English the nature of the personal data we collect, the purposes for which it is processed, the lawful bases on which we rely, and the rights you hold as a data subject under applicable personal data protection legislation.
This Policy is incorporated by reference into and forms an integral part of the horse89 Terms and Conditions. By registering an Account or using any part of the Platform, you acknowledge that you have read and understood this Policy in its entirety.
Note on Language: This Policy is published in English, which is the governing language for all contractual and legal matters on the horse89 platform. In the event of any inconsistency between this English version and any translated version, the English version shall prevail in all respects.
For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:
| Term | Definition |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person — including but not limited to name, identification number, contact details, financial data, location data, or online identifiers. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction, whether automated or manual. |
| "Data Controller" | Horse89, which determines the purposes and means of processing Personal Data collected through the Platform. |
| "Data Processor" | A third party that processes Personal Data on behalf of Horse89, subject to written data processing agreements and bound by strict confidentiality obligations. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of agreement by the User to the processing of their Personal Data for a specified purpose. |
| "KYC Data" | Identity verification data collected to fulfil Know Your Customer obligations, including government-issued identification (e.g., MyKad), proof of address, and payment method ownership documentation. |
| "Cookies" | Small text files placed on a User's device by the Platform for session management, analytics, personalisation, and security purposes. |
Horse89 collects Personal Data through several distinct channels: directly from Users during registration and account management; automatically through technical systems when the Platform is used; and from trusted third-party service providers where necessary for KYC, fraud prevention, or payment processing.
When you create an Account on horse89, we collect:
Prior to approving withdrawal requests, and in compliance with applicable anti-money laundering obligations, horse89 requires:
We record data associated with all deposits and withdrawals, including:
Horse89 processes Personal Data only where a lawful basis exists for doing so. The applicable bases are as follows:
| Legal Basis | When It Applies at Horse89 |
|---|---|
| Contractual Necessity | Processing required to create and manage your Account, process deposits and withdrawals, and deliver the gaming and betting services you have requested. |
| Legal Obligation | Processing required to comply with applicable law, including anti-money laundering obligations, KYC requirements, fraud prevention duties, and regulatory reporting. |
| Legitimate Interests | Processing for fraud detection, platform security, abuse prevention, service improvement, and internal analytics — where such interests are not overridden by the User's privacy rights. |
| Consent | Processing for direct marketing communications (promotional emails, SMS alerts) and non-essential analytics cookies — where explicit consent has been obtained and may be withdrawn at any time. |
Horse89 uses the Personal Data we collect for the following specific purposes:
Horse89 does not use your Personal Data for automated decision-making that produces legal or similarly significant effects without providing you with the right to request human review of such decisions.
Horse89 does not sell, rent, or otherwise commercially transfer your Personal Data to unrelated third parties. We may share your data with the following categories of recipients, strictly to the extent necessary and subject to binding data protection obligations:
To process deposits and withdrawals, we share relevant financial data with approved payment processors including FPX-connected Malaysian banks (Maybank, CIMB, Public Bank, Hong Leong Bank), e-wallet operators (Touch 'n Go, Boost, GrabPay), and cryptocurrency network infrastructure providers. These processors receive only the minimum data required to complete each transaction.
We engage certified third-party KYC and identity verification service providers to assist with document authenticity checks and anti-money laundering screening. These partners are bound by strict data processing agreements and are prohibited from using your data for any purpose other than the verification service they provide.
Our live dealer and slots games are provided by licensed third-party game studios. These studios may receive session-level data (user identifier, bet amounts, game outcome) to operate their game systems. They do not receive your name, contact details, or financial account information.
Horse89 uses specialist fraud detection and cybersecurity platforms that process IP addresses, device fingerprints, and transaction behavioural data to identify and block fraudulent activity. These services operate under legitimate interests as the lawful basis and are subject to contractual data protection obligations.
Horse89 will disclose Personal Data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, valid legal process, or a binding regulatory directive. We will, where legally permitted, notify affected Users of such disclosures.
In the event of a merger, acquisition, asset sale, or corporate restructuring involving horse89, User data may be transferred to the acquiring entity, subject to the acquiring party agreeing to be bound by the terms of this Privacy Policy or a policy providing equivalent or greater protection.
Important: Horse89 will never share your Personal Data with third-party marketing companies, data brokers, or advertising networks for the purpose of targeting you with third-party advertisements.
Horse89 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, and in any event for no longer than required by applicable legal, regulatory, or contractual obligations. The following retention periods apply as a general guide:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of account, plus 7 years following account closure |
| KYC / identity verification documents | Duration of account, plus 7 years following account closure (AML compliance requirement) |
| Financial transaction records | 7 years from date of transaction |
| Gameplay and betting history | Duration of account, plus 5 years following account closure |
| Customer support communications | 3 years from date of last interaction |
| Technical / device / session data | 13 months from collection (rolling) |
| Marketing consent records | Until consent is withdrawn, plus 2 years for record-keeping |
| Self-exclusion records | Permanently, to prevent future re-registration during exclusion period |
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be associated with an identified or identifiable individual. Where data is anonymised rather than deleted, the resulting aggregated data may be retained indefinitely for statistical and analytical purposes.
The security of your Personal Data is a foundational operational priority at horse89. We implement a layered, defence-in-depth security architecture encompassing both technical and organisational controls. Key measures include:
Your Responsibility: Platform security is a shared responsibility. You must maintain the confidentiality of your Account password, enable 2FA, and notify horse89 immediately if you suspect unauthorised access to your Account.
Horse89 uses cookies and similar tracking technologies (collectively, "Cookies") to operate the Platform, remember your preferences, analyse usage patterns, and protect against fraudulent activity. The table below describes the categories of Cookies we deploy:
| Cookie Type | Lawful Basis | Purpose |
|---|---|---|
| Strictly Necessary | Contractual necessity | Session management, authentication, security tokens, load balancing. Cannot be disabled without breaking core platform functionality. |
| Functional / Preference | Contractual necessity / consent | Remembering your preferred currency (MYR), language setting, game layout preferences, and responsible gambling limit configurations. |
| Analytics | Consent | Aggregated, anonymised data on platform usage — page views, session durations, navigation paths — used to improve UX and performance. |
| Fraud & Security | Legitimate interests | Device fingerprinting and behavioural signals used by our fraud detection system to identify anomalous activity and protect User Accounts. |
You may manage your cookie preferences through the cookie consent banner displayed on your first visit to the Platform, or through your browser settings. Disabling strictly necessary Cookies will impair or prevent Platform functionality. Withdrawing consent for analytics Cookies will not affect your ability to use the Platform.
Horse89's primary data processing infrastructure is hosted on servers located within the Asia-Pacific region. However, certain Data Processors (such as KYC verification partners, cloud platform providers, and fraud detection services) may process Personal Data in jurisdictions outside Malaysia.
Where Personal Data is transferred outside Malaysia to a jurisdiction that does not provide an equivalent level of data protection, horse89 implements appropriate safeguards to protect such data, including:
You may request details of the specific safeguards applied to any international transfer of your Personal Data by contacting our Data Protection Officer using the contact details in Section 14.
Subject to applicable data protection law, you hold the following rights in respect of your Personal Data held by horse89. Requests may be submitted via email to our Data Protection Officer at the address provided in Section 14 of this Policy.
| Right | What It Means |
|---|---|
| Right of Access | You may request a copy of all Personal Data horse89 holds about you, along with information about the purposes for which it is processed. |
| Right to Rectification | You may request that inaccurate or incomplete Personal Data be corrected or updated without undue delay. |
| Right to Erasure | You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected — subject to overriding legal retention obligations (e.g., AML record-keeping). |
| Right to Restriction | You may request that we restrict processing of your Personal Data in certain circumstances, such as while you contest its accuracy or object to its processing. |
| Right to Data Portability | You may request that we provide your Personal Data in a structured, commonly used, and machine-readable format for transfer to another data controller. |
| Right to Object | You may object at any time to processing based on legitimate interests, including direct marketing — in which case we will cease such processing unless we can demonstrate compelling legitimate grounds. |
| Right to Withdraw Consent | Where processing is based on consent (e.g., marketing emails, analytics cookies), you may withdraw consent at any time without affecting the lawfulness of prior processing. |
Horse89 will respond to all verifiable data subject requests within 30 days of receipt. Where a request is complex or numerous, we may extend this period by a further 60 days — in which case we will notify you of the extension and the reason for it within the initial 30-day period.
The horse89 Platform is strictly restricted to individuals aged 21 years and above. We do not knowingly collect Personal Data from anyone under the age of 21. Age verification is a mandatory component of the account registration and KYC process, and no withdrawal will be approved without satisfactory age verification having been completed.
If horse89 discovers or is notified that an individual under the age of 21 has registered an Account and provided Personal Data, we will immediately close that Account, void all associated transactions, and securely delete the Personal Data of the underage individual from our systems — except where retention is required by applicable law for the purpose of recording the incident.
If you are aware of a minor who has accessed the horse89 platform, please contact our support team immediately at [email protected] so that we can take prompt action. Protecting minors from accessing gambling services is a non-negotiable commitment of horse89.
Horse89 reserves the right to modify this Privacy Policy at any time to reflect changes in applicable data protection law, regulatory requirements, or our data processing practices. The "Effective" date displayed at the top of this Policy indicates when the current version came into force.
Where amendments are material — meaning they significantly alter how we collect, use, or share your Personal Data — we will provide advance notice to registered Users via the email address on record at least 14 days before the changes take effect. For non-material updates (such as clarifying existing language or updating contact details), changes will take effect immediately upon publication.
Your continued use of the Platform after revised Terms take effect constitutes your acceptance of the updated Privacy Policy. If you do not accept the revised Policy, you must cease using the Platform and request Account closure in accordance with the horse89 Terms and Conditions.
If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or need to report a privacy concern, please contact our Data Protection Officer using the details below. Our support team serves players across Malaysia — including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam — 24 hours a day, 7 days a week.
| Contact Channel | Details & Purpose |
|---|---|
| Email (DPO) | [email protected] — for data subject rights requests, privacy complaints, and KYC queries |
| Live Chat | Available 24/7 on the Platform — for general queries, account support, and responsible gambling assistance |
| Response Time | Data subject rights requests: within 30 calendar days. General queries: typically within 2 hours via live chat. |
If you are not satisfied with our response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. Horse89 will cooperate fully with any regulatory investigation and will not retaliate against any User who exercises their rights under this Policy.
For responsible gambling self-exclusion requests, deposit limit changes, or account cooling-off requests — which are treated with priority — please contact our support team directly via live chat or email, referencing "Responsible Gambling Request" in your message subject. See our Responsible Gambling page for full details.
These aren't just legal obligations — they represent the operational standards horse89 holds itself to in protecting every Malaysian player's data.
Every data transmission between your device and horse89 is protected with 256-bit SSL/TLS encryption. Your credentials, financial data, and personal information are never transmitted in plain text.
Horse89 does not sell, rent, or transfer your personal information to data brokers, advertising networks, or unrelated third parties. Your data is used solely to operate the platform and serve you as a player.
Access, correct, export, or request deletion of your personal data at any time by contacting our Data Protection Officer. We respond to all verified requests within 30 days, as required by applicable law.
Identity documents submitted for KYC verification are stored in an encrypted document vault with restricted internal access. KYC data is shared only with certified verification partners bound by confidentiality agreements.
Horse89 collects only the data that is strictly necessary to deliver our services, comply with legal obligations, and protect the platform. We do not collect data speculatively or beyond what this Policy describes.
In the unlikely event of a data breach that poses a material risk to your rights, horse89 will notify affected players without undue delay and take immediate remediation steps — not bury the incident in fine print.
Our Data Protection Officer and 24/7 support team are here to help. Whether you have a data rights request, a privacy concern, or a general question about our platform policies — we'll give you a straight answer in plain English.
21+ only | Play responsibly | Privacy Policy effective January 2026