Privacy Policy Thor89 –
Malaysian Player Data Security

Welcome to the thor89 Privacy Policy. This document represents our written commitment to every player using the thor89 platform in Malaysia. We understand that your trust is our most valuable asset, and protecting your personal data is the number one priority in every operational decision we make.

This Privacy Policy applies to all users who access the thor89 website, use the thor89 mobile app, or interact with any services provided by the thor89 platform. This includes registered players, guests browsing the website, and individuals who contact our support team.

Thor89 operates in full compliance with the provisions of Malaysia's Personal Data Protection Act 2010 (PDPA) and the best international standards in personal data management. We appoint a data protection officer responsible for ensuring that every aspect of our data processing complies with applicable law and industry best practices.

This policy covers all data processing activities carried out by thor89, including the collection, storage, use, disclosure, and deletion of personal data. We are committed to processing your data only for legitimate, necessary, and reasonable purposes.

Thor89 collects various categories of personal information to enable us to provide a safe, fair, and high-quality service to all players. Below are the full details of the types of data we collect:

Personal Identification Information

• Full name as it appears on your official identification document.
• MyKad identification number or passport number for foreign nationals.
• Date of birth for age verification purposes (18 years and above).
• Gender and nationality (required for regulatory compliance).

Contact Information

• Active mobile phone number for account verification and service communications.
• Email address for important notifications and promotional communications (with consent).
• Full residential address (required for high-level KYC compliance).

Financial Information

• Bank account number and registered bank name for withdrawal purposes.
• Deposit and withdrawal transaction history within the thor89 platform.
• Digital wallet information linked to your thor89 account.

Technical Information

• IP address of the device used to access the thor89 platform.
• Web browser type, operating system, and device type.
• Session information including login time, session duration, and in-platform activity.
• Geolocation data for verification of permitted geographic regions.

Thor89 collects personal information through several transparent channels that are made known to users. We ensure that every data collection method is carried out lawfully and with respect for your privacy.

• Account Registration: Information you provide directly when completing the thor89 account registration form.
• KYC Verification: Identity documents submitted during the mandatory identity verification process.
• Financial Transactions: Data automatically generated when you make a deposit or withdrawal.
• Gaming Activity: Game records, bets, wins, and losses maintained by the thor89 system.
• Customer Communications: Information you share when contacting our support team via LiveChat or email.
• Cookie Technology: Data automatically collected via cookies and website tracking technologies when you browse the platform.
• Third-Party Sources: In certain cases, information obtained from identity verification service providers or authorised regulatory bodies.

The personal information we collect is used transparently for the following purposes, and only for those purposes:

Account Management & Services

• Registering and managing your thor89 user account.
• Verifying your identity and age to meet regulatory requirements.
• Enabling secure platform access using two-factor authentication.
• Processing deposit and withdrawal transactions accurately and promptly.

Security & Fraud Prevention

• Detecting and preventing fraudulent activity, money laundering, and platform abuse.
• Monitoring suspicious activity and protecting the integrity of thor89's gaming systems.
• Fulfilling reporting obligations to the relevant financial authorities.

Service Improvement

• Analysing usage patterns to improve platform design and functionality.
• Personalising the user experience based on your preferences and playing habits.
• Developing new features that are more relevant and useful to Malaysian players.

Communications & Promotions

• Sending important notifications related to your account and security.
• Keeping you informed about thor89 bonuses, promotions, and exclusive offers (with consent).
• Responding to enquiries and resolving complaints through customer support channels.

Thor89 does not sell, rent, or disclose your personal information to third parties for commercial marketing purposes without your explicit consent. However, there are limited situations where disclosure of information to carefully selected third parties is necessary for service delivery:

• Payment Processing Providers: Transaction information that must be shared with banks and digital wallet providers to process your deposits and withdrawals.
• KYC Verification Service Providers: Personal identification information shared with certified third-party identity verification platforms.
• Game Providers: Limited technical data required by game software providers to ensure smooth game functionality.
• Legal Authority: Information required to be disclosed under court orders, regulatory body directives, or Malaysian legal requirements.
• Auditors & Professional Consultants: Limited information shared with law firms, accountants, or auditors bound by strict confidentiality agreements.

Thor89 uses cookies and related tracking technologies to enhance user experience, analyse website traffic, and ensure user session security. Cookies are small text files stored in your web browser when you visit the thor89 platform.

Types of Cookies We Use:

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
• Performance Cookies: Collecting statistical information on how users interact with the platform for analysis and improvement purposes.
• Functional Cookies: Saving user preferences such as language, time zone, and display settings for a more personalised experience.
• Security Cookies: Helping detect suspicious activity and protecting your account from unauthorised access.

You can manage your cookie settings through your web browser at any time. Please note that disabling essential cookies may affect the functionality of the thor89 platform on your device.

The security of your personal data is thor89's top priority. We implement a comprehensive range of technical and organisational security measures to protect your information from unauthorised access, loss, alteration, or accidental disclosure.

• 256-bit SSL Encryption: All data communications between your browser and thor89 servers are encrypted using the latest TLS protocol.
• Encryption of Stored Data: Sensitive data stored in the thor89 database, including financial information and KYC documents, is encrypted using AES-256 algorithms.
• Layered Access Control: Access to player personal data is restricted to staff who genuinely require it to perform their duties.
• Two-Factor Authentication (2FA): An additional security layer for account access that protects you even if your password is compromised.
• 24/7 Security Monitoring: An intrusion detection and threat monitoring system operating around the clock to identify and address potential threats promptly.
• Regular Penetration Testing: Regular security audits and penetration testing conducted by independent cybersecurity experts to identify and address any vulnerabilities.

Under the Personal Data Protection Act 2010 of Malaysia and international standards, you have the following rights regarding the personal data we hold:

• Right of Access: You have the right to request a copy of all personal data we hold about you at any time.
• Right to Rectification: You have the right to request correction of any inaccurate or outdated personal data held in our records.
• Right to Erasure: Under certain circumstances, you have the right to request deletion of your personal data from our systems, subject to data retention obligations under applicable law.
• Right to Restriction of Processing: You have the right to request that we restrict the processing of your data under certain circumstances defined by law.
• Right to Data Portability: You have the right to receive your personal data in a machine-readable format for transfer to another service provider.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: You may withdraw consent previously given for specific data processing at any time, without affecting the validity of processing that has already taken place.

To exercise any of the above rights, please contact the thor89 support team via LiveChat or email at [email protected]. We will process your request within 30 business days.

Thor89 retains your personal data only for as long as necessary to fulfil the original purpose of collection or to comply with applicable legal obligations. Retention periods vary depending on the type of data and the relevant legal requirements.

• Active Account Data: Retained for the duration your account is active and up to 7 years after account closure to comply with Malaysia's financial legal requirements.
• Transaction Records: Deposit, withdrawal, and wagering history is retained for a minimum of 7 years in accordance with the legal requirements of the Inland Revenue Board of Malaysia.
• KYC Documents: Retained for the period specified by the relevant regulatory body, typically 5–7 years after the end of the business relationship.
• Security Logs: Access and security log data is retained for 2 years for incident investigation purposes if required.
• Communication Data: Customer support chat records are retained for 2 years for service quality and complaint resolution purposes.

Once the retention period expires, your personal data will be securely deleted or anonymised in accordance with our certified data deletion procedures.

Thor89 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in business practices, legal requirements, or evolving industry standards. Any significant changes will be communicated to registered players via in-platform notifications or their registered email address.

The "Last Updated" date displayed at the top of this document always reflects the effective date of the most recent amendment. We encourage you to review this page periodically to stay informed about how thor89 protects your information.

If you have any questions, concerns, or complaints about how thor89 handles your personal data, or wish to exercise any of your privacy rights, our team is ready to assist.