Privacy Policy

This Privacy Policy ("Policy") describes how h2m88 ("h2m88", "we", "us", "our") collects, uses, stores, discloses, and protects the personal data of individuals who register as members, visit the h2m88 website at h2m88.com, or interact with any h2m88 product or service. This Policy is an integral part of the h2m88 Terms and Conditions and should be read alongside that document.

h2m88 operates under international gaming authority licensing and processes personal data in accordance with applicable data protection regulations. We are committed to handling your personal information with transparency, purpose limitation, and appropriate security — values that are central to how h2m88 operates as a trusted platform for Malaysian players.

By registering an h2m88 account or using the h2m88 website, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

1. Introduction & Data Controller

1.1 h2m88 is the data controller responsible for your personal data collected through the h2m88 platform and website. As data controller, h2m88 determines the purposes and means by which your personal data is processed.

1.2 This Policy applies to personal data collected from: registered h2m88 members; individuals who have submitted registration information but have not completed account verification; visitors to the h2m88 website who have not registered; and individuals who contact h2m88 support.

1.3 This Policy does not apply to data practices of third-party services, platforms, or providers that may be linked from or integrated with the h2m88 platform. h2m88 is not responsible for the privacy practices of third parties.

2. Personal Data We Collect

2.1 h2m88 collects personal data that is necessary to provide our gaming services, fulfil our regulatory obligations, and maintain the security of the platform. The categories of personal data we collect include:

2.2 h2m88 does not collect or process special categories of sensitive personal data (such as health data, racial or ethnic origin, political opinions, or biometric data) except where expressly required by applicable law or regulatory obligation.

2.3 Where you choose not to provide personal data that is required for account registration or KYC verification, h2m88 may be unable to provide the relevant services or may be required to restrict or suspend your account.

3. How We Use Your Personal Data

3.1 h2m88 uses your personal data for the following purposes:

• Account Registration and Management: To create and administer your h2m88 account, verify your identity, process your login credentials, and maintain your account settings and preferences.
• KYC and Age Verification: To fulfil our mandatory regulatory obligations to verify the identity and age (minimum 21 years) of all registered members, in accordance with our international gaming authority licensing requirements.
• Payment Processing: To process deposits to and withdrawals from your h2m88 account via Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, FPX, and other supported Malaysian payment methods.
• Gaming Services Delivery: To provide access to h2m88 gaming products, including live casino, sportsbook, slots, Mix Parlay, and arcade; to record and settle bets and transactions; and to administer bonuses and promotions.
• Regulatory Compliance: To comply with our international gaming authority licensing obligations, anti-money laundering requirements, fraud prevention measures, and applicable law.
• Responsible Gaming: To monitor gaming patterns and identify members who may be at risk of problem gambling; to administer responsible gaming tools including deposit limits, loss limits, and self-exclusion; and to fulfil our duty of care obligations.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, unauthorised account access, collusion, and other prohibited activities on the h2m88 platform.
• Customer Support: To respond to your queries, complaints, and support requests; to maintain records of communications for quality assurance and dispute resolution purposes.
• Platform Improvement: To analyse aggregated usage data for the purpose of improving h2m88's products, services, and platform performance. Such analysis uses anonymised or aggregated data wherever possible.

4. Legal Basis for Processing

4.1 h2m88 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and h2m88 (the Terms and Conditions) — including account registration, payment processing, and gaming services delivery.
• Legal Obligation: Processing required to comply with applicable laws and our licensing obligations, including KYC identity verification, age verification, anti-money laundering compliance, and responsible gaming programme requirements.
• Legitimate Interests: Processing necessary for h2m88's legitimate business interests, including fraud detection, platform security, dispute resolution, and service improvement — where such interests are not overridden by your data protection rights.
• Consent: Where we rely on your consent to process personal data (for example, for certain marketing communications), you have the right to withdraw that consent at any time by contacting h2m88 support.

5. Data Sharing & Disclosure

5.1 h2m88 does not sell your personal data to third parties. We share personal data only in the following limited circumstances:

• Regulatory Authorities: h2m88 is required by its international gaming authority licensing to provide member data to the relevant regulatory authority upon request. This includes identity verification records, transaction histories, and responsible gaming intervention records.
• KYC and Identity Verification Providers: h2m88 uses licensed third-party KYC service providers to assist in verifying member identity and age. These providers process personal data on h2m88's behalf under data processing agreements that require them to maintain appropriate security standards.
• Payment Processors: Transaction data is shared with payment processing providers (including Touch n Go, Boost, and Malaysian banking institutions) to the extent necessary to process deposits and withdrawals.
• Game Content Providers: Certain gaming session data is shared with third-party game studios (such as Pragmatic Play, PG Soft, and others) to facilitate game delivery, RNG certification, and dispute resolution. This data is shared under contractual data protection obligations.
• Law Enforcement and Legal Proceedings: h2m88 will disclose personal data to law enforcement agencies, courts, or other competent authorities where required to do so by applicable law, court order, or in connection with the prevention and investigation of fraud, money laundering, or other criminal activity.
• Business Transfers: In the event of a merger, acquisition, or sale of h2m88's business or assets, personal data held by h2m88 may be transferred to the successor entity, subject to equivalent data protection obligations.

5.2 All third parties with whom h2m88 shares personal data are required to handle that data in accordance with applicable data protection standards. h2m88 does not authorise third parties to use your personal data for their own independent purposes.

6. Cookies & Tracking Technologies

6.1 h2m88 uses cookies and similar tracking technologies on the h2m88 website to provide, maintain, and improve the platform, and to remember your preferences and login session.

6.2 The following types of cookies are used on h2m88:

• Strictly Necessary Cookies: Essential for the h2m88 website to function correctly, including maintaining your login session and remembering your account preferences. These cookies cannot be disabled.
• Functional Cookies: Remember your language preferences, display settings, and other optional customisations to personalise your h2m88 experience.
• Analytics Cookies: Collect anonymised information about how visitors use the h2m88 website, including pages visited, session duration, and technical error logs. This data is used to improve platform performance.
• Security Cookies: Used to detect fraudulent activity, unauthorised login attempts, and bot traffic, supporting the security of your h2m88 account.

6.3 You may control non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the h2m88 platform.

7. Data Retention

7.1 h2m88 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying our legal, regulatory, accounting, and reporting obligations.

7.2 Under our international gaming authority licensing obligations, h2m88 is required to retain member identity, transaction, and gaming activity records for a minimum period after account closure. This retention period reflects applicable anti-money laundering record-keeping requirements.

7.3 KYC documentation is retained for the period required by applicable law and our licensing framework, typically a minimum of five years following the termination of the member relationship.

7.4 After the applicable retention period has expired, h2m88 will securely delete or anonymise your personal data in a manner that prevents its reconstruction.

8. Data Security

8.1 h2m88 implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and h2m88's servers;
• One-way cryptographic hashing of account passwords — h2m88 staff cannot view member passwords in plain text;
• Access controls limiting h2m88 staff access to personal data on a need-to-know basis;
• Regular penetration testing and security audits of h2m88's systems;
• Segregated storage of member financial data from other operational systems.

8.2 While h2m88 takes all reasonable precautions, no system is entirely immune from security risks. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, h2m88 will notify affected members and relevant regulatory authorities in accordance with applicable breach notification obligations.

8.3 Members are jointly responsible for maintaining the security of their own h2m88 account credentials. Please refer to Section 3 of our Terms and Conditions for your account security obligations.

9. Your Data Protection Rights

9.1 Subject to applicable law and any overriding regulatory obligations, you have the following rights in relation to your personal data held by h2m88:

• Right of Access: You have the right to request a copy of the personal data h2m88 holds about you and information about how it is processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held by h2m88. You may update certain account information directly through your account dashboard.
• Right to Erasure: You may request deletion of your personal data in certain circumstances. Note that h2m88 may be unable to fulfil erasure requests where retention is required by law or our licensing obligations.
• Right to Restriction: You may request that h2m88 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data.
• Right to Data Portability: You may request that h2m88 provide your personal data in a structured, machine-readable format where processing is based on consent or contract.
• Right to Object: You have the right to object to h2m88's processing of your personal data where such processing is based on legitimate interests.

9.2 To exercise any of the above rights, please submit a written request to h2m88 support via email at [email protected]. h2m88 will respond to all data rights requests within 30 calendar days of receipt.

9.3 h2m88 may request identity verification before processing a data rights request to protect member privacy and prevent unauthorised disclosure.

10. Children & Minors

10.1 h2m88's services are strictly available to individuals who are 21 years of age or older. h2m88 does not knowingly collect personal data from individuals under the age of 21.

10.2 Where h2m88 discovers that it has collected personal data from an individual who is under 21, h2m88 will immediately delete that data and terminate the associated account.

10.3 If you have reason to believe that a person under 21 has registered an h2m88 account or provided personal data to h2m88, please contact support immediately at [email protected].

11. Third-Party Services

11.1 The h2m88 platform integrates with third-party services including game content providers, payment processors, and KYC verification providers. Each third-party provider operates under its own privacy policy and data processing terms.

11.2 h2m88 requires all third-party data processors to maintain appropriate technical and organisational security measures and to process personal data only in accordance with h2m88's documented instructions.

11.3 h2m88 is not responsible for the data practices of third-party providers operating outside the scope of h2m88's data processing agreements with them. Members who interact directly with third-party platforms should review those platforms' own privacy policies.

12. International Data Transfers

12.1 As an internationally licensed gaming operator, h2m88 may transfer your personal data to, and process it in, countries other than Malaysia in connection with the operation of the h2m88 platform, regulatory compliance, and the provision of gaming services.

12.2 Where personal data is transferred to jurisdictions that may not provide an equivalent level of data protection to that available in Malaysia, h2m88 ensures that appropriate safeguards are in place, including contractual data protection obligations between h2m88 and the receiving entity.

12.3 By registering an h2m88 account, you acknowledge and consent to the transfer of your personal data to other jurisdictions for the purposes described in this Policy.

13. Amendments to This Policy

13.1 h2m88 reserves the right to amend this Privacy Policy at any time. Material changes will be communicated to registered members via a platform notification and by updating the "Last Updated" date at the top of this document.

13.2 Your continued use of the h2m88 platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

13.3 We recommend that all members periodically review this Privacy Policy at h2m88.com/privacy-policy to remain informed of how h2m88 handles their personal data.

14. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about how h2m88 has handled your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 via the h2m88 platform (average response: 3–5 minutes)
• Email: [email protected] (average response: 2–4 hours)

For formal data protection requests (access, rectification, erasure, portability), please submit your request in writing via email with the subject line "Data Rights Request — [Your Account Username]". h2m88 will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days.