Privacy Policy grab89 Malaysia

This Privacy Policy is published by grab89 and applies to all users who register, browse, or use any services provided through our platform, including the grab89.vin website and the grab89 mobile app available for download.

"Personal Data" refers to any information that can identify you directly or indirectly, such as your full name, phone number, email address, identification number, financial information, and platform usage data.

As a platform operating in Malaysia and serving local users, grab89 fully respects and complies with the provisions of the Personal Data Protection Act 2010 (PDPA). We believe that your trust is the most valuable asset we must safeguard wholeheartedly.

Grab89 collects various types of personal data depending on how you interact with our platform. Below is a summary of the data collected and its purposes:

How Data Is Collected

• Directly from you — during account registration, the KYC process, or when contacting customer support.
• Automatically — through cookies, tracking pixels, and server logs while you use the platform.
• Trusted third parties — such as payment providers to verify transactions, or identity verification providers for KYC purposes.

Grab89 only uses your personal data for legitimate purposes consistent with the reason it was collected. We do not use your data for unrelated purposes without obtaining your consent first.

• Processing account registration, login, and user identity verification.
• Managing deposits, withdrawals, and all financial transactions on the platform.
• Sending important notifications related to accounts, transactions, promotions, and platform updates.
• Detecting and preventing fraud, money laundering, and activities that violate our terms of service.
• Fulfilling applicable legal obligations and regulatory compliance requirements.
• Improving the user experience through usage pattern analysis and feedback.
• Providing more effective and personalised customer support.
• Delivering relevant promotional offers to users who have consented to receive them.

Grab89 does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. However, there are limited situations where we need to share data with certain parties to enable us to deliver services to you.

Parties That May Receive Your Data

• Payment providers — such as FPX, Touch 'n Go eWallet, and GrabPay to securely process deposit and withdrawal transactions.
• Identity verification providers — to carry out the KYC process to ensure platform security and comply with legal requirements.
• Technology service providers — such as cloud infrastructure providers that help us operate the platform securely and efficiently.
• Regulatory authorities and law enforcement agencies — when required by Malaysian law or a valid court order.
• Business partners — only in specific cases and with strict contractual safeguards to ensure your data is handled appropriately.

All third parties that receive your data from grab89 are bound by strict confidentiality agreements and are only permitted to process data for specified purposes. grab89 has zero tolerance for any misuse of data by service partners.

The security of your data is a responsibility we take very seriously. grab89 invests in enterprise-grade security infrastructure to ensure your information is always protected from both external and internal threats.

Security Measures

• Data encryption in transit using TLS/SSL 256-bit protocols.
• Data encryption at rest on servers using AES-256 standard.
• Role-based access control (RBAC) to ensure only authorized personnel can access sensitive data.
• Periodic security audits by independent parties to identify and address any system vulnerabilities.
• An active intrusion detection system (IDS) that monitors network traffic in real time.
• Regular data backups stored at separate locations as a disaster recovery measure.

Data Retention Period

Grab89 retains your personal data for as long as your account is active or as needed to provide services to you. Once an account is closed, we will retain certain data such as transaction records for the minimum period required by Malaysian law for audit and regulatory compliance purposes. Data that is no longer needed will be securely deleted or anonymized.

The grab89 platform uses cookies and similar tracking technologies to enhance your browsing experience, ensure the platform functions smoothly, and help us understand how users interact with our website.

Types of Cookies Used

• Essential Cookies — required for core platform functions such as login sessions and security. These cookies cannot be disabled.
• Performance Cookies — collect anonymous information about how users use the platform to help us improve our services.
• Functional Cookies — remember your preferences such as language and account settings to provide a more personalized experience.
• Analytics Cookies — help us understand usage patterns, the most popular pages, and how users navigate the platform.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality of some areas of the grab89 platform.

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding personal data held by grab89. We are committed to fully respecting and facilitating the exercise of these rights.

To exercise any of the rights above, please contact the grab89 customer support team. We will process your request within a reasonable timeframe and notify you of the action taken.

The grab89 platform is strictly for individuals aged 18 and above. We do not knowingly collect, process, or store any personal data from children or individuals under the age of 18.

If we determine that a person under the age of 18 has registered an account or provided us with their personal data, we will immediately delete the account and all related data without notice. Parents or guardians who become aware that their child has registered on our platform are encouraged to contact grab89 customer support immediately.

Grab89 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or service improvements. All changes will be published on this page along with the latest update date.

For significant changes, we will notify users via in-platform notifications or their registered email. Continued use of the platform after the stated update date will be considered acceptance of the amended Privacy Policy.

If you have any questions, concerns, or wish to exercise your privacy rights, grab89's Data Protection Officer team is ready to assist you.

We are committed to responding to all privacy-related inquiries within a reasonable timeframe. For issues requiring further investigation, we will keep you informed of case progress on a regular basis.