HH88 Privacy Policy – User Personal Data Protection

1. Introduction

HH88 ("we", "Platform") values the privacy of every individual who uses our services. This Privacy Policy outlines our practices regarding the collection, use, disclosure, and protection of your personal information when you use the HH88 platform, browse our website, or interact with any of our services.

This document is drafted in accordance with internationally recognised data protection principles, including the requirements of the relevant Personal Data Protection Act (PDPA). By registering for or using the HH88 platform, you consent to the collection and use of your personal data as described in this Privacy Policy.

If you disagree with any part of this policy, we encourage you to contact our team for further discussion before continuing to use the platform. Your safety and confidence are our top priority.

2. Types of Personal Data We Collect

We collect various types of personal data depending on how you interact with our platform. Below are the main categories of data we may collect:

2.1 Data You Provide Directly

2.2 Automatically Collected Data

• Technical data: IP address, browser type, operating system, screen resolution, and device information.
• Usage data: Pages visited, session duration, games played, login frequency and navigation patterns.
• Cookie data: Session cookies, preference cookies and analytics identifiers that help us understand user behaviour.
• Transaction data: Deposit history, withdrawals, wagering activity, wins, and other financial activity associated with your account.

2.3 Data from Third-Party Sources

In certain circumstances, we may receive your personal data from KYC service providers we use for identity verification, payment providers to verify transactions, and regulatory bodies for compliance purposes.

3. How We Use Your Data

HH88 uses your personal data solely for lawful and specific purposes. We do not use your data for any purpose beyond what is stated here without your prior consent.

• Account management: Create, verify and manage your account, including the KYC process required for compliance.
• Service provision: Process deposits, withdrawals, wagering and other financial transactions you make.
• Platform security: Detect and prevent fraud, money laundering, unauthorised access and platform abuse.
• Communications: Send transaction notifications, account updates, security alerts and customer support communications.
• Marketing (with consent): Deliver promotions, bonus offers and new game information — only if you have consented to receive such communications.
• Platform improvement: Analyse usage patterns to improve the user experience, platform performance and content offered.
• Legal compliance: Meet the legal and regulatory obligations imposed on online entertainment platform operators.

4. Data Storage and Security

Protecting your personal data is a responsibility we take very seriously. hh88 implements multiple layers of technical and organisational security controls to keep your data safe from unauthorised access, loss, destruction or accidental disclosure.

4.1 Technical Security Measures

• 256-bit SSL encryption: All data transmitted between your browser and our servers is protected with bank-grade SSL encryption.
• Encryption of data at rest: Sensitive data such as passwords and payment information is stored in encrypted form using modern encryption algorithms.
• Two-factor authentication (2FA): We offer two-factor authentication for an added layer of protection on your account.
• Continuous monitoring: Our security systems monitor for suspicious activity around the clock, 24 hours a day, 7 days a week.
• Regular security audits: Our platform undergoes regular independent security audits conducted by certified third-party cybersecurity firms.

4.2 Access Controls

Access to your personal data within HH88 is restricted to staff who genuinely need it to perform their duties. All staff undergo data protection training and are bound by strict confidentiality agreements.

5. Sharing Data with Third Parties

HH88 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. However, there are limited circumstances in which we may need to share your data:

• Payment service providers: To process your deposits and withdrawals, we share the necessary information with our payment providers. All such providers are bound by confidentiality agreements and strict security standards.
• KYC service providers: Identity verification information is shared with accredited third-party KYC providers to ensure compliance with anti-money laundering (AML) requirements.
• Game service providers: Our game providers may receive session data necessary to run the games, but this does not include sensitive financial or personal identification information.
• Authorities and regulatory bodies: We will disclose data when required by law, court order or lawful direction from a competent authority.

6. Cookies and Tracking Technologies

The hh88 website uses cookies and similar tracking technologies to enhance your experience, maintain session security and collect analytics data that helps us improve the platform.

6.1 Types of Cookies We Use

• Essential cookies: Required for basic website operations such as login, session management, and security. These cookies cannot be disabled.
• Preference cookies: Save your settings such as preferred language and display preferences to make your experience more comfortable.
• Analytics cookies: Help us understand how users interact with our platform so we can continue to improve it.
• Marketing cookies: Used to deliver more relevant promotions to you — only activated with your consent.

You can manage or disable cookies through your browser settings. Please note that disabling essential cookies may affect platform functionality.

7. Your Privacy Rights

As an hh88 platform user, you have clear and enforceable rights regarding your personal data. We are committed to making it easy for you to exercise these rights.

To exercise any of the above rights, please contact us by email at [email protected]. We will respond within 30 business days. For complex cases, this period may be extended up to 60 days with prior notice to you.

8. Children's Data Protection

The hh88 platform is strictly for users aged 18 and above. We do not knowingly collect, store, or process personal data of individuals under the age of 18. If we discover that a child's data has been collected without our knowledge, it will be deleted immediately and the associated account will be terminated.

If you are a parent or guardian who believes your child has registered on our platform, please contact us immediately at [email protected] so that we can take the appropriate action without delay.

9. Cross-Border Data Transfers

As a global platform, hh88 may store and process your data on servers located outside Malaysia. In all such cases, we ensure that data transfers are carried out with adequate safeguards through:

• Data processing agreements that meet international protection standards
• Use of data centres compliant with ISO 27001 or equivalent security standards
• Data protection impact assessments prior to any cross-border transfer

10. Data Retention Period

HH88 retains your personal data only for as long as necessary for the purposes stated in this policy, or as required by applicable law. In general:

• Active account data: Retained for the duration of the active account period plus 5 years after account closure for legal compliance purposes.
• Financial transaction data: Retained for a minimum of 7 years in accordance with anti-money laundering legal requirements.
• Support communication logs: Retained for 3 years from the date of last communication.
• Anonymised analytics data: May be retained for a longer period as it cannot be used to personally identify you.

11. How to Contact Us

If you have any questions, concerns or complaints regarding our Privacy Policy or how we handle your personal data, please don't hesitate to reach out. Our team is ready to help.

We aim to respond to all privacy-related inquiries within 3 business days. For more complex cases involving data subject rights requests, please allow up to 30 business days for us to process your request thoroughly and accurately.

This Privacy Policy may be updated from time to time. Any material changes will be communicated to you via email or in-platform notification at least 7 days before taking effect. The date of the most recent update will always be displayed at the top of this document.