H2m88 Privacy Policy – Malaysia Player Personal Data Protection

H2m88 only collects information that is genuinely necessary to provide a safe, seamless, and responsible service. We do not collect excessive or irrelevant data beyond the purpose of this platform.

• Information is collected directly from you during registration, KYC verification, and every time you interact with the platform.
• We also automatically collect data such as IP addresses and server log records for security and service improvement purposes.
• Identity verification documents such as copies of MyKad or passport are retained only for as long as required by Malaysian law.

Every piece of data we collect is used for a specific and legitimate purpose. h2m88 does not use your data for any purpose beyond what is stated here without obtaining your consent first.

• Account Management: Your personal information is used to create and manage your h2m88 account, including the login process, password recovery, and two-factor authentication.
• Financial Transaction Processing: Financial data is used solely to process deposits and withdrawals securely and accurately to the correct account.
• KYC Verification: Identity information is used to comply with legal requirements related to anti-money laundering (AML) and to verify that players are at least 21 years of age.
• Platform Security: Technical data such as IP addresses is used to detect and prevent unauthorised access, fraud, multi-account usage, and other suspicious activity.
• Service Improvement: Anonymised usage data is used to analyse how players use the platform for the purpose of improving the interface and user experience.
• Important Communications: Email addresses and phone numbers are used to send account notifications, transaction confirmations, and promotional offer information (with your consent).
• Responsible Gaming: Game history is monitored to identify patterns that may indicate problem gambling, so we can offer appropriate assistance.

H2m88 does not sell, rent, or disclose your personal data to any third party for marketing or commercial purposes without your explicit consent. However, there are limited situations where data sharing is necessary to operate the platform securely and comply with the law.

• Payment Providers: Required information is shared with licensed payment processors (FPX, TNG eWallet, GrabPay, and others) solely for the purpose of processing your financial transactions.
• Regulatory Authority: h2m88 complies with all Malaysian legal requirements. Data may be disclosed to the relevant authorities when required by court order or criminal investigation.
• Technology Service Providers: Trusted cloud infrastructure and cybersecurity providers may have limited access to data for technical purposes, and they are bound by strict confidentiality agreements.
• Game Software Providers: Minimum required information is shared with game software providers (such as Pragmatic Play, Evolution) solely for the purposes of verifying player eligibility and resolving game disputes.

Your data security is h2m88's highest technical priority. Our platform employs a combination of cutting-edge encryption technology and industry best practices to ensure your data is always protected against cyber threats.

• 256-bit SSL/TLS Encryption: All data transmitted between your device and h2m88 servers is encrypted using 256-bit SSL/TLS protocols, the same standard used by the world's leading banking institutions.
• Stored Data Encryption: Sensitive data such as banking information and KYC documents are encrypted at rest on our servers using the AES-256 algorithm.
• Multi-Layer Access Control: Only specially authorised staff may access players' personal data, and all access is automatically logged and monitored.
• Two-Factor Authentication (2FA): 2FA is available for all member accounts to provide an extra layer of security during login.
• Periodic Security Audits: The h2m88 platform undergoes regular independent security audits by accredited cybersecurity firms to identify and address any vulnerabilities.
• 24/7 Monitoring: An automated monitoring system operates around the clock to detect any intrusion attempts or suspicious activity in real time.

H2m88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collects information on how you use the platform (e.g. most frequently visited pages) to help us improve the user experience. All data is collected anonymously.
• Functional Cookies: Stores your preferences such as language, display settings, and login information to make future use of the platform more convenient.
• Analytics Cookies: We use internal analytics tools to understand platform usage patterns in aggregate. This data is not linked to your personal identity.

You can manage cookie settings through your web browser. However, disabling certain cookies may affect the full functionality of the h2m88 platform. For instructions on managing cookies in popular browsers, please refer to your browser's help documentation.

As an h2m88 player, you have full rights over your personal data. h2m88 fully respects and upholds these rights in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

H2m88 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or for as long as required by Malaysian law.

• Active Account Data: Retained for the duration your account is active and for 7 years after account closure to comply with financial regulatory requirements.
• Transaction Records: Retained for a minimum of 7 years in accordance with the requirements of Malaysia's Anti-Money Laundering Act 2001 (AMLA).
• KYC Documents: Retained for the duration your account is active and for 5 years after account closure, or as required by the relevant regulatory authority.
• Technical Logs: Server logs and security data are retained for 12 months for the purpose of investigating security incidents when required.
• Marketing Data: If you withdraw consent for marketing communications, the relevant data will be deleted within 30 days.

When the retention period expires, your data will be securely deleted using methods that ensure it cannot be recovered. For data stored in physical format, secure destruction methods (shredding) are applied.