Privacy Policy hm888 – Data Protection & Player Privacy

1Introduction & Scope of This Policy

This Privacy Policy ("Policy") is issued by hm888 and applies to all users who access our platform via website, mobile app, or any other digital channel provided by hm888. This Policy explains in detail how we collect, process, store, and protect your personal data.

• This Policy applies to all registered players as well as visitors who access the hm888 platform without registering.
• We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) in all our data handling practices.
• Hm888 acts as the data controller responsible for personal data collected through our platform.
• This Policy is to be read together with the hm888 Terms and Conditions and other policy documents published on our platform.

2Personal Data We Collect

Hm888 only collects data that is strictly necessary to provide you with the best possible service. We do not collect irrelevant or excessive data. The following are the categories of data we collect:

• Your data is collected directly through registration forms, the KYC process, and your interactions with the platform.
• Some technical data is collected automatically when you access the platform via cookies and similar tracking technologies.
• We do not collect sensitive data such as medical information, political views, or religious beliefs.

3How We Use Your Data

Every piece of data we collect is used for a clear and legitimate purpose. hm888 does not use player data for any purpose not stated in this policy without first obtaining your consent.

• To process account registration, verify identity and enable access to the hm888 platform.
• To securely and accurately process deposits, withdrawals and all financial transactions.
• To send important notices regarding accounts, transactions, promotions and policy updates via email or SMS.
• To detect and prevent fraudulent activity, money laundering and platform abuse.
• To comply with applicable legal and regulatory obligations, including reporting requirements to the relevant authorities.
• To analyse usage patterns and improve the user experience, platform performance and game offerings.
• To provide game recommendations and promotions tailored to your preferences and playing habits.

4Data Sharing with Third Parties

Hm888 does not sell or rent your personal data to any party. However, in certain limited circumstances, we may need to share your information with the following parties to ensure the platform operates smoothly and securely.

• Payment Providers: Transaction information is shared with payment service providers such as FPX, TNG eWallet and Boost solely to process your deposits and withdrawals.
• Identity Verification Providers: KYC data is shared with accredited identity verification service providers to meet compliance requirements.
• Game Providers: Minimum required game data is shared with slot and casino game providers to ensure smooth gameplay sessions.
• Legal Authorities: We will disclose data when required by law, court order, or a legitimate request from a competent authority.
• Analytics Services: Non-identifying usage data is shared with analytics providers for platform improvement purposes.

5Security & Data Protection

Hm888 continuously invests in security infrastructure to ensure your personal data remains protected at all times. We employ a combination of the latest security technologies and strict operational procedures to safeguard your information from unauthorised access, modification, or disclosure.

• 256-bit SSL encryption for all data transmitted between your device and hm888 servers.
• Passwords are stored using strong hashing methods — we ourselves cannot view your password in plain text.
• Multi-layered access controls with two-factor authentication (2FA) for all staff handling player data.
• 24/7 security monitoring and automated intrusion detection systems to identify suspicious activity.
• Regular security audits by independent third parties to identify and address any system vulnerabilities.
• A tested incident response plan to ensure any data breach is detected and addressed promptly.

6Data Retention & Deletion

Hm888 retains your personal data only for as long as necessary for the purpose it was collected, or as required by law. Once the retention period expires, your data will be securely deleted or anonymised.

• Active account data is retained for as long as your account remains active and for a period of 5 years following account closure for legal compliance purposes.
• Financial transaction records are retained for a minimum of 6 years in accordance with financial reporting and anti-money laundering requirements.
• Customer support communication logs are retained for 2 years for reference and dispute resolution purposes.
• Non-identifying analytics data may be retained for a longer period for research and platform improvement purposes.
• When your data is deleted, we ensure it is thoroughly removed from all our systems and backups.

7Your Rights as a Player

Under Malaysia's PDPA and our own policy, you have several important rights regarding your personal data. hm888 fully respects these rights and makes it easy for you to exercise them.

8Cookie Policy

Hm888 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

• Essential Cookies: Required for core platform functionality such as login authentication and session security. These cookies cannot be disabled.
• Performance Cookies: To collect information about how you use the platform to help us improve performance and the user experience.
• Functional Cookies: To store your preferences such as preferred language and display settings to deliver a more personalised experience.
• Analytics Cookies: To help us understand aggregated platform usage patterns in order to make better improvement decisions.

You can manage and delete cookies through your browser settings. However, disabling certain cookies may affect the functionality of the hm888 platform. More information on cookie management is available in your browser settings.

9Children's Privacy

Hm888 is a platform intended exclusively for individuals aged 18 and above. We do not knowingly collect personal data from children or minors.

• The hm888 platform is not designed for or directed at individuals under the age of 18.
• If we find that personal data has been collected from a minor, we will immediately delete that data and close the relevant account.
• Parents or guardians who become aware that a minor in their care has registered on our platform are requested to contact the hm888 support team immediately.
• Hm888 applies an age verification process during registration to prevent minors from accessing the platform.

10Changes to This Privacy Policy

Hm888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or how the platform operates. We are committed to keeping you informed of any significant changes.

• Any material changes to this Privacy Policy will be communicated to you via your registered email or a prominent notice on the platform at least 14 days before the changes take effect.
• The "Updated" date at the top of this document reflects the date this Privacy Policy was last reviewed.
• Continued use of the hm888 platform after a policy change takes effect will be considered acceptance of the updated policy.
• If you do not agree with any changes made, you have the right to close your account and request deletion of your personal data as set out in Section 7.
• For any enquiries regarding this Privacy Policy, please contact the hm888 support team via Live Chat, available 24 hours a day, 7 days a week.