Your privacy matters to thr89. This Privacy Policy explains precisely what personal data we collect when you use our platform, why we collect it, how we use and protect it, who we may share it with, and what rights you have over your own information. We encourage all players — particularly those based in Indonesia — to read this document in full.
Last updated: January 2026 | Effective immediately upon account registration.
256-Bit SSL Encryption
All data transmitted between your device and thr89's servers is protected by 256-bit SSL encryption — the same standard used by leading international banks. Your personal and financial information travels safely at every step.
We Never Sell Your Data
thr89 does not sell, rent, or trade your personal data to third-party marketers, data brokers, or advertising networks. Your information is used solely to operate, secure, and improve the thr89 platform and your experience on it.
Transparent Data Practices
We are committed to full transparency about what data we hold and why. This policy is written in clear, plain English — not impenetrable legal jargon — so you always know exactly where you stand with thr89 regarding your personal information.
Indonesia-Aware Compliance
thr89 serves primarily Indonesian players. Our data handling practices are aligned with the expectations of Indonesian data protection standards and the principles of internationally recognised frameworks such as the GDPR, applied in good faith to our Indonesian player base.
Your Rights, Respected
You have the right to access, correct, port, and in certain circumstances request the deletion of your personal data held by thr89. We have dedicated processes to handle these requests promptly and without unnecessary friction.
Breach Notification
In the unlikely event of a data security incident that affects your personal information, thr89 is committed to notifying affected players in a timely manner and taking immediate remedial action to contain and resolve the incident.
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
"thr89" / "we" / "us" / "our" refers to the thr89 platform, its operating entity, and all subsidiaries, affiliates, and associated service providers involved in delivering the thr89 gaming experience to players.
"Player" / "you" / "your" refers to any individual who registers for or accesses a thr89 account, browses the thr89 website, or otherwise interacts with any thr89 service, whether or not a formal account has been created.
"Personal Data" refers to any information that identifies or could reasonably be used to identify a specific natural person, including but not limited to: full name, date of birth, email address, mobile number, residential address, Indonesian National Identity Card (KTP/e-KTP) number, bank account details, and IP address.
"Processing" refers to any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
"Services" refers collectively to the thr89 website (https://thr89.pro), mobile interface, sportsbook, live casino, slot games, fish shooting, live blackjack, promotional communications, customer support channels, and all other products and features offered under the thr89 brand.
"Third Party" refers to any entity that is not thr89 or the Player, including payment processors, KYC verification providers, fraud prevention services, game content studios, and our international licensing authority.
"Cookies" refers to small text files placed on your device by the thr89 platform for the purposes described in Section 9 of this Policy.
thr89 collects the minimum Personal Data necessary to deliver a secure, functional, and compliant gaming experience. The categories of data we collect are outlined below:
2.1 Registration Data. When you create a thr89 account, we collect your full legal name, date of birth, email address, mobile phone number, and residential address in Indonesia. This information is required to establish your identity, verify your eligibility to play, and fulfil our compliance obligations.
2.2 Identity Verification (KYC) Data. To process withdrawals and fulfil anti-money-laundering requirements, we collect copies of your Indonesian government-issued identity documents (KTP/e-KTP, SIM, or Passport), and where required, proof of residential address such as a recent utility bill or a bank statement issued by BCA, BRI, BNI, Mandiri, or another registered Indonesian bank.
2.3 Financial Data. We collect bank account details and e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja) strictly for the purpose of processing deposits and withdrawals in Indonesian Rupiah (IDR). We do not store full card numbers or CVV codes. Payment data is handled by PCI DSS-compliant payment processors.
2.4 Gaming Activity Data. We record your betting history, game sessions, stake amounts, winnings, login times, and platform navigation behaviour. This data is used to personalise your experience, detect suspicious activity, enforce responsible gaming tools, and resolve disputes.
2.5 Technical Data. We automatically collect your IP address, device type, browser type and version, operating system, referring URL, and session duration. This data helps us optimise platform performance and identify potential security threats.
2.6 Communications Data. When you contact our support team via Live Chat, email, or WhatsApp, we retain records of those communications — including timestamps, the content of your messages, and any attachments you send — for quality assurance, training, and dispute resolution purposes.
2.7 Marketing Preferences. If you opt in to promotional communications, we record your preferences, including which channels (email, WhatsApp, push notification) you have consented to receive marketing through, and any subsequent opt-out requests.
The following table summarises the categories of data we collect and their primary purposes:
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Registration | Name, email, date of birth, mobile number | Account creation, eligibility verification |
| KYC / Identity | KTP/e-KTP, SIM, Passport, proof of address | AML compliance, withdrawal processing |
| Financial | Bank account number, e-wallet ID (OVO, DANA, GoPay) | Deposit and withdrawal processing in IDR |
| Gaming Activity | Bet history, session times, stake and payout records | Personalisation, responsible gaming, dispute resolution |
| Technical | IP address, browser, device type, OS | Security, fraud detection, platform optimisation |
| Communications | Support chat logs, email correspondence | Customer service, dispute resolution, quality assurance |
| Marketing | Channel preferences, opt-in/opt-out status | Promotional communications (consent-based only) |
thr89 collects Personal Data through several channels and mechanisms, all of which are described transparently below:
thr89 processes your Personal Data only for specific, clearly defined purposes. We do not process data in a manner that is incompatible with the purposes for which it was originally collected. The primary purposes are:
4.1 Account Management. To create, maintain, and administer your thr89 account, including verifying your eligibility, managing your balance, processing your transactions, and communicating account-related notifications.
4.2 Payment Processing. To process deposits and withdrawals in Indonesian Rupiah (IDR) via your nominated local bank account (BCA, BRI, BNI, Mandiri, and others) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja), and to maintain accurate financial records of all transactions.
4.3 Regulatory Compliance. To fulfil our anti-money-laundering (AML), Know Your Customer (KYC), and counter-terrorist-financing (CTF) obligations as required by our international gaming licence and the compliance frameworks we operate under. This includes verifying your identity and monitoring transaction patterns for unusual activity.
4.4 Fraud Prevention and Platform Security. To detect, investigate, and prevent fraudulent account activity, multi-accounting, bonus abuse, match-fixing-related betting patterns, unauthorised access, and other security threats. Technical data such as IP addresses and device fingerprints play a key role in this process.
4.5 Responsible Gaming. To monitor your gaming behaviour for indicators of problem gambling, to enforce any self-exclusion, deposit limit, or session time reminder tools you have activated, and to comply with our responsible gaming obligations under our licensing conditions. If you appear to be experiencing gambling-related difficulties, we may reach out proactively. For more information, visit our Responsible Gaming page.
4.6 Customer Support. To respond to your support enquiries, investigate complaints, resolve disputes, and maintain records of communications for quality assurance and training purposes. All support interactions are retained for a minimum of 12 months.
4.7 Platform Personalisation and Improvement. To personalise your thr89 experience — such as displaying relevant game recommendations, sportsbook markets, or promotions based on your gaming history — and to analyse aggregated usage data to improve our platform, fix bugs, and develop new features.
4.8 Marketing Communications (Consent-Based Only). Where you have explicitly opted in, to send you promotional communications about thr89 bonuses, new game releases, sportsbook special offers, and seasonal promotions (such as those tied to BRI Liga 1 fixtures, Idul Fitri, Ramadhan, or Indonesian Independence Day). You may withdraw your marketing consent at any time by contacting support or adjusting your account communication preferences.
thr89 relies on the following legal bases to process your Personal Data, consistent with internationally recognised data protection principles:
5.1 Contractual Necessity. The majority of our data processing is necessary to perform the contract between thr89 and you — specifically, to deliver the gaming services you have registered for, to process your financial transactions, and to manage your account.
5.2 Legal Obligation. Some processing is required to comply with our legal and regulatory obligations, including KYC and AML requirements imposed by our international gaming licence authority.
5.3 Legitimate Interests. We process certain data — particularly technical and gaming activity data — on the basis of our legitimate interests in maintaining platform security, preventing fraud, improving our services, and operating a responsible gaming environment. We ensure that our legitimate interests do not override your fundamental privacy rights.
5.4 Consent. Where we process data for marketing communications or optional personalisation features, we rely on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
thr89 does not sell your Personal Data. We share it only with trusted third parties where strictly necessary for the purposes described in this Policy, and only under appropriate data protection agreements. The categories of third parties with whom we may share your data are:
6.1 Payment Processors and Financial Institutions. Your bank account details and transaction information are shared with Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) solely to execute your requested deposit or withdrawal. These entities are independently regulated financial institutions bound by their own privacy and security obligations.
6.2 KYC and Identity Verification Providers. We engage accredited third-party identity verification services to process the KYC documents you submit. These providers act under strict data processing agreements and are prohibited from using your identity data for any purpose other than verification on behalf of thr89.
6.3 Fraud Prevention and Security Services. We share technical data (IP addresses, device fingerprints, transaction patterns) with fraud prevention partners to protect our platform and player community. These services process data exclusively for security purposes.
6.4 Game Content Studios. Licensed game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive limited session and technical data to deliver their game content via the thr89 platform. These studios operate under gaming licence obligations that include player data protection requirements.
6.5 Licensing and Regulatory Authorities. We may disclose Personal Data to our international gaming licence authority or to regulatory bodies when required to do so in the context of a compliance audit, investigation, or legal order. We will notify you of such disclosures where legally permitted to do so.
6.6 Professional Advisers. We may share data with lawyers, accountants, auditors, or insurers in the context of professional advice or legal proceedings, subject to strict confidentiality obligations.
thr89 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by our legal and regulatory obligations. The following general retention periods apply:
7.1 Active Accounts. While your thr89 account remains active, we retain all categories of Personal Data collected during your registration and ongoing use of the platform.
7.2 Closed Accounts. Following account closure, we retain your account registration data, KYC documentation, transaction records, and gaming activity history for a minimum of 5 years from the date of closure. This retention period is required by our AML and KYC compliance obligations under our international gaming licence.
7.3 Support Communications. Records of customer support interactions are retained for a minimum of 12 months from the date of the interaction, or longer if the communication relates to an unresolved dispute or a compliance matter.
7.4 Marketing Data. Marketing preferences and consent records are retained for as long as your account remains active. Following account closure or marketing opt-out, consent records are retained for 3 years as evidence of the lawful basis under which communications were sent.
7.5 Technical and Log Data. Server log files and technical data (IP addresses, session records) are typically retained for 90 days for routine security monitoring, and for up to 2 years where retained as part of a specific fraud or security investigation.
When data is no longer required, it is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.
thr89 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key security measures include:
8.1 Encryption in Transit. All data transmitted between your browser or app and thr89's servers is encrypted using 256-bit TLS/SSL protocols. You can verify this by checking for the padlock icon and "https://" prefix in your browser's address bar at all times when using thr89.
8.2 Encryption at Rest. Sensitive Personal Data — including KYC documents and financial information — is stored in encrypted form on secure, access-controlled servers. Database encryption keys are managed through a dedicated key management system with strict access controls.
8.3 Access Controls. Access to systems containing Personal Data is restricted to authorised thr89 personnel on a strict need-to-know basis. Access is controlled through multi-factor authentication, role-based permissions, and regular access reviews. We maintain audit logs of all access to sensitive data systems.
8.4 Password Security. thr89 never stores passwords in plain text. Account credentials are stored as cryptographic hashes using industry-standard algorithms. We strongly recommend that players use a unique, strong password for their thr89 account and enable any available two-factor authentication features.
8.5 Penetration Testing and Security Audits. thr89's platform undergoes regular security assessments including penetration testing and vulnerability scanning by qualified independent security professionals. Identified vulnerabilities are prioritised and remediated according to their severity.
8.6 Incident Response. thr89 maintains a documented incident response plan for data security events. In the event of a confirmed data breach that poses a risk to your rights and freedoms, we will notify affected players without undue delay and take immediate containment and remediation action.
thr89 uses cookies and similar tracking technologies to ensure the platform functions correctly, to improve your experience, and to support our security and analytics operations. The types of cookies we use are:
9.1 Strictly Necessary Cookies. These cookies are essential for the thr89 platform to operate. They maintain your login session, remember your account preferences, and enable core functionality such as bet slip operation and balance display. You cannot opt out of strictly necessary cookies as the platform cannot function without them.
9.2 Performance and Analytics Cookies. These cookies collect anonymised data about how players use the thr89 platform — such as which pages are visited most frequently and where players encounter errors. This information helps us improve platform performance and user experience. These cookies do not collect personally identifiable information in isolation.
9.3 Functionality Cookies. These cookies remember your personalisation choices — such as your preferred language, displayed odds format (decimal, fractional, or Malay), and notification settings — to provide a more tailored experience on return visits.
9.4 Security Cookies. These cookies support our fraud detection and account security systems by helping thr89 identify unusual login patterns, detect bot activity, and flag potentially compromised accounts for review.
You can manage non-essential cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the thr89 platform. For more details, consult your browser's help documentation.
thr89 respects your rights over your Personal Data. Subject to applicable law and our compliance obligations, you have the following rights regarding the data we hold about you:
To exercise any of these rights, contact our Data Protection team at with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days. We may need to verify your identity before processing certain requests.
thr89 strictly enforces a minimum age of 21 years for all account holders. The collection or processing of Personal Data from individuals under 21 years of age is strictly prohibited on the thr89 platform.
11.1 Age Verification. thr89 employs age verification checks during the registration process and during KYC document review. Any account found to belong to an individual under 21 years of age will be immediately suspended, all pending transactions cancelled, and any funds held in the account returned to the source payment method where legally permissible.
11.2 Parental and Guardian Responsibility. If you are a parent or guardian and believe that a minor in your care has registered a thr89 account or provided Personal Data to our platform, please contact us immediately at . We will investigate the matter promptly and take all necessary steps to close the account and delete the associated data in accordance with applicable law.
11.3 No Targeted Marketing to Minors. thr89 does not knowingly direct any marketing communications toward individuals under 21 years of age. Our promotional content, advertising placements, and affiliate arrangements are all subject to age-appropriateness standards consistent with responsible gambling guidelines.
The thr89 platform may occasionally reference or display content originating from third-party game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Pocket Games Soft. When you interact with game content delivered by these studios, their own privacy policies and data handling practices may apply to any data exchanged directly between your device and their content delivery infrastructure.
12.1 No Responsibility for External Sites. thr89 is not responsible for the privacy practices of any third-party websites, platforms, or services. Any links to external content are provided solely for informational or operational convenience, and their inclusion does not constitute an endorsement of the third party's data handling practices.
12.2 Affiliate Traffic. If you arrive at thr89 via an affiliate or partner referral link, the referring affiliate may receive a confirmation that a registration or deposit event occurred for commission calculation purposes. We share only the minimum necessary data with affiliates and do not share your Personal Data such as your name, identity documents, or financial details with affiliate partners.
We strongly encourage you to review the privacy policies of any third-party service you interact with in connection with your thr89 account to understand how they handle your data independently of thr89.
thr89 operates internationally, and as a result, your Personal Data may be processed in countries other than Indonesia. This may occur when our servers, third-party service providers, or licensing authority are located in jurisdictions outside Indonesia.
13.1 Safeguards for International Transfers. Whenever Personal Data is transferred outside Indonesia, thr89 ensures that appropriate safeguards are in place. These include contractual protections in the form of data processing agreements that require the recipient to handle your data to standards at least equivalent to those described in this Privacy Policy.
13.2 Server Infrastructure. thr89's primary server infrastructure is hosted on enterprise-grade cloud platforms with data centres that maintain ISO 27001 certification and operate in accordance with international information security standards. We select hosting partners specifically for their security credentials and compliance track record.
13.3 Your Consent. By using the thr89 platform and accepting this Privacy Policy, you acknowledge and consent to the transfer of your Personal Data to the locations and recipients described in this section, subject to the safeguards described above.
thr89 reserves the right to update, modify, or replace any part of this Privacy Policy at any time. Changes may be made in response to new regulatory requirements, changes in our business operations, developments in technology, or feedback from our player community.
14.1 Notification of Changes. When we make material changes to this Privacy Policy, we will notify registered players via email to the address on record, or via a prominent notice displayed on the thr89 platform upon login. The "Last Updated" date at the top of this page will be revised to reflect the date on which the updated policy takes effect.
14.2 Continued Use as Acceptance. Your continued use of the thr89 platform following notification of a Privacy Policy update constitutes your acceptance of the revised terms. If you do not agree to the updated Privacy Policy, you must discontinue use of the platform and may request account closure by contacting our support team.
14.3 Archived Versions. Previous versions of the thr89 Privacy Policy are retained internally for compliance and record-keeping purposes. If you require access to a prior version of this Policy, please contact us at with your request.
If you have any questions, concerns, or requests relating to this Privacy Policy or the way thr89 handles your Personal Data, our Data Protection team is available through the following channels:
Live Chat
Available 24 hours a day, 7 days a week. Connect instantly via the Live Chat widget on the thr89 platform for the fastest response to privacy-related enquiries.
Send your privacy enquiry or data rights request to with the subject line "Privacy Policy" or "Data Rights Request". We aim to respond within 5 business days.
Reach our Indonesian-speaking support agents via WhatsApp at +62 811 0000 8989, available daily 08:00–23:00 WIB for general privacy questions.
Now that you understand how thr89 protects your privacy and data, dive into our full range of games and sports betting markets. BRI Liga 1, EPL, Champions League, live casino, slots, fish shooting, and more — all in IDR. Adults 21+ only.