1 Introduction
Thor89 values the privacy of every user on our platform. We understand that in this digital age, personal data protection is more than a legal requirement — it is the foundation of trust between a platform and its users. This Privacy Policy is written in plain, easy-to-understand language so you know exactly what happens to your information.
This Privacy Policy applies to all users who access thor89.onl, use the thor89 mobile app, or interact with any of our services. It covers how we collect, process, store, and protect your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).
If you have any questions about how we handle your data, or wish to exercise any of your data protection rights, please contact our privacy team using the details provided at the end of this document.
2 Personal Data Collected
Thor89 only collects personal data that is genuinely necessary to operate the service safely and efficiently. No data is collected excessively or without a clear purpose. The following are the categories of data we may collect:
| Data Categories | Examples of Information | How It Is Collected |
|---|---|---|
| Identity Information | Full name, date of birth, IC/passport number | Registration form, KYC process |
| Contact Information | Email address, phone number, residential address | Account registration, profile updates |
| Financial Information | Bank account number, bank name, transaction records | Deposit and Withdrawal Process |
| Usage Data | Game history, betting habits, active session times | Automated systems during platform use |
| Technical Data | IP address, device type, web browser, operating system | Server logs, cookies, tracking technologies |
| Verification Documents | MyKad/passport image, proof of address, verification selfie | Mandatory KYC Process |
3 Data Collection & Processing Purposes
Every piece of data collected by thor89 has a specific and legitimate purpose. We process your personal data on the following bases:
- Contract performance: To register and manage your account, process deposits and withdrawals, and deliver the gaming services you request.
- Legal obligations: To comply with KYC requirements, anti-money laundering (AML) obligations, and reporting to the relevant authorities under Malaysian law.
- Legitimate interests: To detect and prevent fraud, ensure platform security, and analyse usage patterns for service improvement purposes.
- Consent: To send promotions, bonus offers, and marketing communications — only if you have given explicit consent to receive such communications.
- Responsible gaming: To monitor betting patterns and identify signs of problem gambling in order to safeguard the well-being of our members.
4 Data Sharing with Third Parties
Thor89 does not sell or rent your personal data to any third party. However, in the course of operating the platform, we may share your data with the following parties under controlled and limited circumstances:
- Game software providers: Our game provider partners receive only the minimum technical data required to deliver a seamless gaming experience. They are bound by strict confidentiality agreements.
- Payment gateway: Approved payment processors receive the financial data necessary to securely process your deposits and withdrawals.
- KYC service providers: A third-party identity verification platform used to confirm your identity during the KYC process. This service is subject to equivalent data protection standards.
- Legal authorities: Where required by law, court order, or a legitimate request from the relevant authorities, thor89 will disclose the necessary information.
- Business transfers: In the event of a merger, acquisition, or asset transfer, user data may be transferred as part of the business assets, subject to notification to users.
5 Cookies & Tracking Technologies
Thor89 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small data files stored on your device when you visit our website. The following are the types of cookies we use:
- Mandatory cookies: These cookies are required for core platform functions such as login authentication, session security, and technical stability. You cannot disable these cookies.
- Performance cookies: Helps us understand how users interact with the platform, which pages are visited most frequently, and where users encounter difficulties. This data is used in aggregate and anonymised form.
- Functional cookies: Stores your preferences such as language, display settings, and login information for a smoother repeat experience.
- Targeting cookies: Activated only with your consent, used to display more relevant promotions and offers based on your activity on the platform.
You may manage or disable non-essential cookies through your web browser settings at any time. However, disabling certain cookies may affect some functionality on the thor89 platform.
6 Personal Data Security
Protecting your personal data is a core technical and operational priority at thor89. We implement multiple layers of security controls to ensure your data remains safe at all times:
- Encryption of data in transit: All communications between your device and our servers are secured with TLS 1.3 protocol and 256-bit SSL encryption.
- Encryption of data at rest: Sensitive data including financial information and KYC documents is stored in encrypted format using AES-256.
- Role-based access control: Only staff who require access to specific data to carry out their duties are permitted to do so, with every access logged and audited.
- Two-factor authentication: The thor89 platform supports two-factor authentication (2FA) as an additional security layer for your account.
- Regular penetration testing: thor89 conducts regular security testing by independent security experts to identify and address any system vulnerabilities.
- 24/7 threat monitoring: Our automated monitoring system detects and responds to security threats around the clock.
7 Your Rights Under the PDPA
As a registered thor89 platform user in Malaysia, you are protected under the Personal Data Protection Act 2010 (PDPA). This Act grants you the following rights regarding your personal data: