Privacy Policy — cepat89

1 Introduction

This Privacy Policy (hereinafter "Policy") is issued by cepat89, the operator of the online gaming platform accessible at https://cepat89.cam (hereinafter "the Platform", "we", "us", or "our"). It sets out how cepat89 collects, uses, stores, shares, and protects personal data relating to all registered users and visitors to the Platform (hereinafter "Player", "User", or "you").

cepat89 primarily serves players based in Malaysia. We recognise the importance of personal data protection for our users in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and across all states and territories of Malaysia. We are committed to handling your personal information responsibly, transparently, and in accordance with applicable data protection principles.

By registering an Account on cepat89 or by continuing to use the Platform, you acknowledge that you have read this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please discontinue use of the Platform and close your Account.

2 Definitions

For the purposes of this Policy, the following terms have the meanings assigned below:

3 Data We Collect

cepat89 collects Personal Data through multiple channels in the course of operating the Platform. The categories of data collected are as follows:

3.1 Registration & Account Data

• Full legal name as it appears on your government-issued identity document
• Date of birth (for age verification — cepat89 requires all users to be aged 21 or above)
• Residential address (including postcode and state, Malaysia)
• Email address and mobile contact number
• Username and encrypted password credentials
• Preferred language and communication settings

3.2 KYC & Identity Verification Data

• Copy of Malaysian MyKad, passport, or other accepted government-issued identity document
• Proof of residential address (utility bill, bank statement, etc.)
• Selfie photograph for liveness and document-match verification
• Proof of payment method ownership where required (e.g., bank statement showing account holder name)

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction history, including amounts, timestamps, and payment method references
• Payment method identifiers — such as masked bank account numbers, e-wallet IDs for Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX references, and Maybank, CIMB, Public Bank, Hong Leong account details provided during transactions
• Cryptocurrency wallet addresses used for deposits and withdrawals (BTC, ETH, USDT)
• Bonus credit history and wagering activity associated with promotional campaigns

3.4 Usage & Technical Data

• IP address, device type, operating system, and browser version
• Session duration, pages visited, and in-platform navigation patterns
• Game session logs including wagers placed, outcomes, and game titles accessed
• Geolocation data at the country and region level (not precise GPS coordinates)
• Cookie identifiers and similar tracking technologies as described in Clause 9

3.5 Communications Data

• Records of live chat support interactions
• Email correspondence sent to or received from cepat89 support
• Platform notifications, promotional communications, and your response to such communications

4 Purpose of Processing

cepat89 processes your Personal Data for the following specific and legitimate purposes:

5 Legal Basis for Processing

cepat89 processes Personal Data on the following legal bases, depending on the purpose:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions you have agreed to — including account management, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable law, including KYC and anti-money laundering obligations, age verification requirements, and regulatory reporting duties.
• Legitimate interests: Processing carried out to protect the security and integrity of the Platform, prevent fraud, and conduct analytics to improve our services — where such processing does not override your fundamental rights.
• Consent: Processing for optional purposes such as sending you promotional communications and marketing materials. You may withdraw consent at any time by updating your communication preferences in your Account settings or by contacting our support team.

6 Data Sharing & Disclosure

cepat89 does not sell, rent, or trade your Personal Data to third parties for commercial purposes. We may share your data with the following categories of recipients only to the extent necessary:

• Payment processors: Malaysian payment service providers including DuitNow operators, FPX gateway providers, and e-wallet platforms (Touch 'n Go eWallet, Boost, GrabPay) as required to process your deposit and withdrawal transactions. Data shared is limited to transaction-specific information.
• KYC and identity verification providers: Third-party identity verification services that assist in validating government-issued documents and conducting liveness checks.
• Fraud prevention and AML services: Specialist providers offering transaction screening, fraud detection, and anti-money laundering monitoring — operating under binding confidentiality and data processing agreements.
• Cloud infrastructure and hosting providers: Secure, enterprise-grade hosting and infrastructure providers who store and process Platform data under strict contractual data protection obligations.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or lawful government request. cepat89 will only disclose the minimum information required to satisfy such requests.
• Professional advisers: Legal, accounting, and audit professionals acting under applicable professional confidentiality obligations where access to your data is necessary for the specific professional engagement.

7 Data Retention

cepat89 retains Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The general retention principles we apply are as follows:

• Active Account data: Retained for the duration of your Account's active status plus a minimum period thereafter as required for legal and compliance purposes.
• KYC and identity documents: Retained for a minimum of five (5) years following Account closure, in compliance with applicable anti-money laundering and financial record-keeping obligations.
• Transaction and financial records: Retained for a minimum of seven (7) years in accordance with financial record-keeping requirements.
• Support communications: Retained for a period of three (3) years from the date of the interaction, unless a longer retention period is required for dispute resolution or legal proceedings.
• Marketing consent records: Retained for the duration of your consent and for a reasonable period thereafter as evidence of consent.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised using industry-standard methods. Anonymised, aggregated data may be retained indefinitely for analytics and product improvement purposes.

8 Data Security

cepat89 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, loss, alteration, or disclosure. Key measures include:

• Encryption in transit: All data exchanged between your browser and the cepat89 Platform is encrypted using TLS 1.2 or higher (HTTPS). This applies to all pages, account pages, payment flows, and API communications.
• Encryption at rest: Sensitive Personal Data stored on cepat89 servers — including KYC documents and financial records — is encrypted using AES-256 or equivalent standards.
• Access controls: Access to Personal Data is restricted on a strict need-to-know basis. Staff with access to Player data are subject to confidentiality obligations and regular access reviews.
• Password security: User passwords are stored using modern cryptographic hashing algorithms with salting. cepat89 does not store passwords in plaintext.
• Intrusion detection and monitoring: Our infrastructure is monitored around the clock for unusual activity, potential intrusions, and security events. Automated alerts trigger immediate investigation protocols.
• Vendor security standards: Third-party providers who process Personal Data on our behalf are assessed for security compliance before engagement and are subject to contractual security obligations.

9 Cookies & Tracking Technologies

cepat89 uses cookies and similar tracking technologies to operate the Platform effectively, maintain your session state, and understand how users interact with our services. The categories of cookies we use are as follows:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cookies cannot be disabled without breaking core Platform functionality.
• Functional cookies: Used to remember your preferences, language settings, and display choices so that each visit is personalised to your previously indicated preferences.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate and use the Platform. This data helps us identify which features are most used, where users experience friction, and where improvements are needed. These cookies do not identify you personally.
• Security cookies: Used to detect and prevent fraudulent activity, including automated bot activity and credential-stuffing attacks.

You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in or using certain Platform features. cepat89 does not use third-party advertising or behavioural targeting cookies.

10 International Data Transfers

In the course of operating the Platform, your Personal Data may be transferred to, stored in, or processed by servers or service providers located outside of Malaysia. Such transfers may occur in connection with cloud hosting infrastructure, KYC verification services, or fraud prevention providers.

Where Personal Data is transferred internationally, cepat89 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under Malaysian data protection principles. Safeguards employed include contractual data processing agreements and standard contractual clauses where applicable.

cepat89 does not transfer Personal Data to jurisdictions that do not provide an adequate level of data protection without first implementing appropriate contractual or technical safeguards.

11 Your Data Rights

As a Player on the cepat89 Platform, you have the following rights with respect to your Personal Data. To exercise any of these rights, contact our support team via live chat or at the email address provided in Clause 14.

12 Minors & Age Policy

cepat89 is strictly an adult entertainment platform. The Platform is intended solely for individuals who are 21 years of age or older. We do not knowingly collect Personal Data from individuals under 21 years of age.

Age verification is a mandatory step in the KYC process. If cepat89 discovers or has reasonable cause to believe that a registered Account is held by a person under 21 years of age, we will immediately suspend the Account, conduct a review, and if confirmed, permanently close the Account. Any funds held in such an Account will be processed in accordance with applicable law.

If you believe a minor may have accessed or registered on the Platform, please notify us immediately at our support team. Parents and guardians concerned about minor access to online gambling platforms may wish to implement parental control software on shared devices.

13 Amendments to This Policy

cepat89 reserves the right to update or amend this Privacy Policy at any time. When material changes are made — such as new categories of data being collected, new purposes for processing, or new third-party sharing arrangements — we will provide advance notice to registered Players via the email address on file and through a prominent notice on the Platform.

Minor amendments such as clarifications, typographical corrections, or structural reorganisations that do not affect the substance of your rights or our obligations may take effect upon publication without prior notice. The "Last updated" date at the top of this Policy will be revised accordingly.

Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you must cease using the Platform and request Account closure prior to the effective date of the changes.

14 Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data, please contact cepat89 through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week through the cepat89 Platform. This is the fastest channel for urgent data-related queries.
• Email: [email protected] — please include "Privacy Request" in the subject line to ensure your query is routed to the appropriate team member. This address is provided as plain text only and should be copied into your own email client.

We will acknowledge all privacy-related inquiries within three (3) business days and provide a substantive response within thirty (30) calendar days. Complex requests involving data access or erasure may require identity verification before we can proceed.