Privacy Policy h2m88 – Your Information Security Comes First

This Privacy Policy ("Policy") is published by h2m88 ("we", "platform") and applies to all users who access or use the h2m88.org website, the h2m88 mobile app, and any services we offer. This Policy outlines our practices for collecting, using, disclosing, and protecting your personal data.

As an online gaming platform operating in Malaysia, we acknowledge our responsibilities under the Personal Data Protection Act 2010 (PDPA Malaysia) and are committed to ensuring your personal data is processed lawfully, fairly, and transparently at all times.

This Policy should be read together with the h2m88 Terms and Conditions, which form part of the overall agreement between you and our platform. In the event of any conflict between these documents, the Privacy Policy shall prevail on matters relating to personal data.

H2m88 collects personal data from you in various ways as you interact with our platform. The following are the types of data we collect:

We may also collect data you share voluntarily, such as feedback, comments, or additional information provided when interacting with our support team. This data is used solely to improve the quality of our services.

H2m88 uses your personal data only for legitimate and necessary purposes. The following are the primary purposes for which your data is used:

• Account Management: Registers your account, verifies your identity, and manages your member profile in full.
• Transaction Processing: Processes deposits, withdrawals, and any other financial transactions you carry out on the platform.
• KYC Verification: Meets legal requirements for identity verification, fraud prevention, and anti-money laundering.
• Service Provision: Enables you to access and use all features and games available on the h2m88 platform.
• Customer Support: Answers enquiries, resolves technical issues, and provides the assistance you need.
• Platform Security: Detects and prevents fraud, multi-account usage, and other harmful activities.
• Legal Compliance: Fulfils applicable legal and regulatory obligations, including reporting requirements to relevant authorities.
• Service Communications: Sends important notifications regarding your account, transactions, and service changes.
• Platform Improvement: Analyses usage patterns to improve the user experience and develop new features.

H2m88 does not sell or transfer your personal data to third parties for their own marketing purposes. However, there are certain situations where we need to share your data with carefully selected parties:

• Payment Providers: Required information is shared with approved payment processors to facilitate deposits and withdrawals securely.
• Game Providers: Minimal technical data is shared with game providers such as Pragmatic Play and Evolution Gaming to ensure games function correctly.
• Technology Service Providers: Cloud infrastructure providers, email services, and analytics tools that help us operate the platform.
• Legal Authorities: Data is disclosed to authorities when required by law or a valid court order.
• Fraud Prevention: Certain information may be shared with industry partners to detect and prevent cross-platform fraud.

All third parties we work with are required to comply with data protection standards equivalent to our own. We sign data processing agreements with all third-party providers to ensure your data is protected at all times.

H2m88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session security, and transaction processing. These cookies cannot be disabled.
• Performance Cookies: Collects information on how you use the platform to help us improve performance and usability.
• Functional Cookies: Remembers your preferences such as language, display settings, and game preferences to deliver a more personalised experience.
• Analytics Cookies: Helps us understand traffic patterns and aggregate platform usage for continuous improvement.

You can manage cookie settings through your web browser preferences. Please note that disabling certain cookies may affect the functionality of h2m88. For the best experience, we recommend allowing essential cookies at a minimum.

The security of your personal data is our absolute priority. h2m88 implements multiple layers of technical and organizational security to protect your information from unauthorized access, loss, alteration, or disclosure.

Technical measures we implement:

• 256-bit SSL/TLS encryption for all data in transit.
• Encryption of sensitive data stored in our databases.
• Two-factor authentication (2FA) is available for all member accounts.
• Always-on firewall and intrusion detection system (IDS).
• Automated security scanning and periodic penetration testing.
• Real-time anomaly monitoring for suspicious account activity.

Organisational measures we implement:

• Mandatory data protection training for all h2m88 staff.
• Strict role-based access control policies.
• Regular internal and external security audits.
• Clear and tested incident response procedures.

H2m88 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable laws and regulations.

In general, data retention periods are as follows:

• Active account data: Retained for as long as your account is active and for a reasonable period following account closure.
• Financial transaction records: Retained for a minimum of 7 years as required under Malaysian financial law.
• Support communication logs: Retained for 3 years for reference and dispute resolution purposes.
• Analytics data (aggregated): Can be stored indefinitely as no personal information is identified.

Once the retention period expires, your data will be securely deleted using methods that ensure it cannot be recovered. For accounts closed at a member's request, data not required to be retained by law will be deleted within 30 business days.

In certain situations, your personal data may be transferred outside Malaysia — for example, when we use cloud services or technology providers operating in other countries. h2m88 ensures that all such data transfers are carried out with adequate safeguards.

The steps we take to protect data in cross-border transfers include ensuring recipient providers are subject to equivalent data protection laws, signing contractually binding standard data protection clauses, and obtaining your consent where required for transfers not covered by legal exemptions.

The h2m88 platform is strictly for adults aged 18 and above. We do not knowingly collect or process personal data of individuals under the age of 18.

All account registrations go through a strict age verification process. If we find that a person under the age of 18 has registered an account, we will close the account immediately and delete all associated data without delay.

If you have any questions, concerns, or wish to exercise any of your privacy rights, the h2m88 data protection team is ready to assist. We aim to respond to all privacy-related inquiries within 14 business days.

You can reach us through the following channels:

• Email: [email protected] (for privacy inquiries, please state "Privacy Inquiry" in the email subject line)
• Live Chat: Available 24/7 via the chat icon at the bottom right corner of the platform
• Help Center: Visit page FAQ us for instant answers to frequently asked questions

If you are dissatisfied with how we have handled your personal data or with the response you received, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia under the provisions of PDPA 2010.