y89 Platform Privacy Notice

This page describes what we collect when you use y89 and how we keep that data protected. We at y89 collect personal information only for account setup, payment processing, legal compliance, and service delivery. Your data is encrypted in transit and stored securely on our servers.

We do not sell your personal information to third parties. We share data only with payment processors, identity verification vendors, and legal authorities where required by law. This privacy notice covers the y89 platform — our sportsbook, live-dealer tables, slots, and esports markets.

Our servers may be located outside Indonesia. Data transfers comply with applicable law and are protected by encryption. You have rights to access, correct, and request deletion of your personal data. Contact our support team to exercise these rights.

What Data We Collect on y89

We collect personal information when you register for a y89 account. This includes your email address, chosen username, password, and basic profile details. During account verification, we request your government ID number, full name, date of birth, and residential address. We use this information to verify your identity and comply with anti-money-laundering regulations.

Payment information is collected when you deposit via QRIS, e-wallet, mobile banking, local payment, online payment, e-wallet, or bank transfer (mobile banking, local payment, online payment, e-wallet). We do not store your full payment card numbers — payment processors handle sensitive payment data. We retain transaction records showing deposit amounts, dates, and payment methods for account reconciliation and legal compliance.

We collect usage data automatically — IP address, browser type, device type, pages visited, games played, wagers placed, and session duration. We use cookies and similar tracking technologies to remember your login and preferences. This data helps us detect fraud, improve service performance, and understand how users interact with y89.

How We Use Your Data on y89

We use your personal information to operate your y89 account, process deposits and withdrawals, and verify your identity before your first withdrawal. We share your data with payment processors to complete transactions and with identity verification vendors to confirm your ID documents. These vendors are contractually obligated to protect your data and use it only for the specified purpose.

We use usage data to detect suspicious activity, prevent fraud, and investigate disputes. If your account shows unusual patterns — multiple failed login attempts, rapid-fire betting, or requests from different countries — we may freeze your account pending investigation. We also use data to improve y89 features, monitor server performance, and comply with legal requests from Indonesian authorities or law enforcement.

We do not use your data for marketing emails unless you opt in. If you receive promotional messages from y89 and wish to unsubscribe, you can do so via the email itself or by contacting our support team in Jakarta, Surabaya, Bandung, Medan, or Semarang.

Third-Party Processors and Data Transfers

Our y89 servers are hosted on cloud infrastructure that may be located outside Indonesia. Data transfers to these servers are encrypted using industry-standard protocols (TLS 1.2 or higher). We share data with third parties only when necessary for service delivery:

• Payment processors: Receive transaction data to process deposits and withdrawals.
• Identity verification vendors: Receive ID documents and personal data to verify your identity.
• Customer support platforms: Receive account information to assist with your queries.
• Legal authorities: May receive data if required by law or court order.
• Fraud detection services: Receive transaction patterns and IP data to identify suspicious activity.

These processors are bound by data protection agreements and may not use your data for their own purposes. We review their security practices regularly. If a processor experiences a data breach, we investigate and notify affected users as required by law.

Your Rights and Data Retention on y89

You have the right to access your personal data held by y89. Contact our support team with a data access request, and we will provide a copy of your information within 30 days. You have the right to correct inaccurate data — update your profile directly or request our help via support.

You have the right to request deletion of your data, subject to legal and operational constraints. If you request account deletion, we retain transaction records as required by law. Identity documents may be retained for regulatory compliance. We do not delete data that is subject to legal holds or ongoing disputes.

We retain personal data only as long as necessary. Account data is kept for the duration of your account plus seven years for tax and legal compliance. Transaction records are retained for ten years per Indonesian financial regulations. Usage logs are deleted after 90 days unless needed for investigation.

We at y89 encrypt your data in transit and at rest. Your personal information is protected by access controls, security audits, and incident response procedures. We take data protection seriously and comply with applicable privacy law.

Security Measures and Incident Response

Our y89 platform uses encryption (TLS 1.2+) to protect data in transit. Passwords are hashed using strong algorithms and never stored in plain text. Access to databases is restricted to authorized personnel only. We conduct regular security audits and penetration testing to identify and fix vulnerabilities.

If we discover a data breach affecting your personal information, we notify you within 30 days where required by law. We also notify relevant authorities. We provide information about the breach, the types of data affected, and recommended steps you should take (password change, account monitoring, etc.). Our incident response team documents breaches, investigates causes, and implements preventive measures.

Policy Updates and Contact

We may update this privacy notice to reflect changes in our practices or legal requirements. Material changes will be communicated to you via email or in-platform notification at least 30 days before taking effect. Your continued use of y89 after an update constitutes your acceptance of the new terms.

If you have questions about our privacy practices or wish to exercise your data rights, contact our support team in English or Indonesian. Our support team is available during business hours (09:00–17:00 Jakarta time, Monday–Friday) via the in-platform message system or email. We respond to privacy requests within 14 business days. We also publish our Terms and Conditions separately — that document covers your rights and responsibilities as a y89 user.

Our services are available only where local law permits. Users are responsible for verifying that access and use comply with their own jurisdiction's regulations. This privacy notice is subject to the laws of the jurisdictions where we operate. Any dispute regarding privacy practices will be handled according to applicable law and our published terms.