Privacy Policy hm88 — Your Personal Data Protection Is Our Priority

1. Introduction

Hm88 ("we", "Platform" or "hm88.ng") is fully committed to protecting the privacy and data security of all members and users of our platform. This Privacy Policy outlines our practices for collecting, processing, storing and safeguarding your personal information in accordance with internationally recognised privacy standards.

By registering an account or using any hm88 services, you consent to the collection and use of your personal data as described in this document. If you do not agree with any aspect of this Privacy Policy, please discontinue use of our platform.

This Privacy Policy applies to all information collected through the hm88.ng website, mobile app, customer support live chat, and all other communication channels related to hm88 services.

2. Personal Data We Collect

Hm88 only collects data required to provide a safe, fair and responsible service to all members. The following are the categories of data we collect:

2.1 Registration Information

• Full name as shown on official identification documents
• Date of birth to verify that you are 18 years of age or older
• Active email address and mobile phone number
• Current residential address including postcode and state
• Username and password chosen during registration

2.2 Identity Verification Documents (KYC)

• A copy of a valid identity card (MyKad) or passport
• Proof of address documents such as utility bills or bank statements
• Bank account or digital wallet information for payment purposes
• A selfie with your identity document when required

2.3 Financial Transaction Data

• Deposit and withdrawal history including dates, amounts and payment methods
• FPX, Touch 'n Go, GrabPay account numbers or other payment methods used
• Betting, wins and loss records across all games

2.4 Platform Usage Data

• Your IP address, browser type, and device operating system
• Pages visited, session duration and platform usage patterns
• Technical error logs and device diagnostic information
• General location data based on IP address (country and region only)

3. How We Use Your Data

All personal data we collect is used responsibly for the following purposes:

4. Data Sharing with Third Parties

Hm88 does not sell members' personal data to any third party for commercial purposes. However, in certain limited situations, we may need to share your information with the following parties:

• Payment providers: FPX, Touch 'n Go eWallet, GrabPay, Boost, and other authorised payment processors require minimal transaction data to securely process your deposits and withdrawals.
• Game software providers: Third-party game providers integrated within the hm88 platform receive the session data necessary to operate games correctly.
• Identity verification services: Approved third-party KYC providers assist us in verifying member identities in accordance with compliance requirements.
• Legal Authority: hm88 will disclose required data to law enforcement agencies or regulatory bodies when mandated by a court order or applicable law.
• Technical service providers: Server hosting, cybersecurity and analytics companies that help us operate the platform infrastructure are bound by strict confidentiality agreements.

All third parties who receive your data are required to comply with data protection standards equal to or higher than those we uphold at hm88.

5. Data Encryption and Security

Hm88 implements multiple layers of technical and organisational security to protect your personal data from unauthorised access, loss, destruction or accidental disclosure:

• 256-bit SSL encryption: All data transmitted between your browser and hm88 servers is protected by military-grade SSL encryption that cannot be broken by unauthorised parties.
• Data encryption at rest: Personal data stored in our databases is protected by AES-256 encryption at the storage level.
• Internal access controls: Only staff with specific authorisation may access member personal data, and all access is logged and regularly audited.
• Two-factor authentication: 2FA is available for all member accounts to add an extra layer of security to the login process.
• 24/7 security monitoring: Our automated monitoring system detects and blocks suspicious access attempts in real time.
• Regular security audits: hm88 conducts regular penetration testing and security audits through independent, registered cybersecurity firms.

6. Cookies and Tracking Technologies

Hm88 uses cookies and similar tracking technologies to enhance the user experience, analyse traffic patterns and ensure platform security. The following are the types of cookies we use:

• Essential Cookies: These cookies are required for core platform functions such as login session authentication and security. They cannot be disabled without affecting your use of the platform.
• Performance Cookies: Collects anonymous information about how you use the platform to help us improve the overall user experience.
• Functional Cookies: Saves your preferences such as language, display settings and login information for your convenience on future visits.
• Analytics Cookies: Helps us understand which pages are most popular and how users interact with the platform for continuous improvement.

You can manage and delete cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of some parts of the hm88 platform.

7. Your Rights as a Data Subject

As an hm88 member, you have the following rights regarding your personal data held by us:

8. Data Retention Period

Hm88 retains your personal data only for as long as necessary to fulfil the original purpose of collection or to comply with applicable legal requirements. The following are our general data retention period guidelines:

• Active account data: Retained for as long as your account is active and for 5 years after account closure for financial record and legal compliance purposes.
• Financial transaction records: Retained for a minimum of 7 years in accordance with applicable accounting laws and AML compliance requirements.
• KYC documents: Retained for 5 years after account closure or after the last related transaction, whichever is later.
• Support communication logs: Retained for 2 years for quality control and dispute resolution purposes.
• Anonymous analytics data: May be retained indefinitely as it contains no personally identifiable information.

Upon expiry of the designated retention period, your personal data will be securely deleted or anonymised in accordance with our standard data disposal procedures.

9. International Data Transfers

In operating a global platform, your personal data may be transferred to, stored in, or processed in countries outside Malaysia. When such transfers occur, hm88 ensures that protections equivalent to those stated in this Privacy Policy are maintained through:

• Legally binding data transfer agreements with all data recipients outside the country
• Selection of partners and service providers who comply with internationally recognised data protection standards
• Use of approved standard contractual clauses to protect data throughout the transfer process

10. Changes to the Privacy Policy

Hm88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technologies used, legal requirements or other operational reasons. Any material changes will be communicated to you via in-platform notifications or email at least 14 days before taking effect.

We encourage you to review this Privacy Policy periodically. The "Last Updated" date at the top of this document will always reflect the date of the most recent amendments. Your continued use of the platform after any changes take effect constitutes your acceptance of the updated policy.

11. Contact Us Regarding Privacy

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, please contact the hm88 Data Protection Officer (DPO) through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 via the chat icon at the bottom corner of the platform
• FAQ Page: Refer FAQ page us for answers to commonly asked privacy questions

We are committed to responding to all privacy-related enquiries within 5 business days. For complaints requiring further investigation, we will keep you informed of progress within 30 days.