Privacy Policy hm888 — Your Personal Data Protection

Introduction

Welcome to the hm888 Privacy Policy. We understand that your personal information is a trust you place in us, and we do not take this responsibility lightly. This Privacy Policy ("Policy") describes the data collection, use, storage and disclosure practices of hm888 ("we", "Platform") in relation to users of the hm888.im platform ("you", "player").

This policy applies to all information collected through our website, the hm888 mobile app and all interactions related to our services. By using the hm888 platform, you agree to the terms set out in this Privacy Policy.

Hm888 collects various types of personal information depending on your interactions with our platform. This information is divided into two main categories:

A. Information You Provide Directly

• Registration information: Full name, date of birth, email address, mobile number, and password.
• Profile information: Username, language preferences, and account settings.
• KYC verification documents: Copies of your identity card or passport, bank statements and other supporting documents required for the identity verification process.
• Financial information: Bank account details, e-wallet account numbers and transaction history for deposits and withdrawals.
• Communications with us: Any messages, complaints or feedback you send to our customer support team.

B. Information Collected Automatically

• Technical data: IP address, browser type, operating system, screen resolution and app version.
• Usage data: Pages visited, session duration, games played and wagering patterns.
• Location data: Approximate geographic location based on IP address for regulatory compliance purposes.
• Device data: Unique device identifiers, device name, and network information.

We collect your personal information through various methods when you interact with the hm888 platform:

• Registration form: Basic information is collected when you create a new account at hm888.
• KYC Process: Identity verification documents are collected when you undergo the mandatory Know Your Customer process prior to your first withdrawal.
• Financial transactions: Payment details are automatically recorded each time you make a deposit or withdrawal.
• Cookies and similar technologies: Browsing data is collected through cookies, pixel tracking and standard web tracking technologies.
• Support interactions: All communications via live chat, email or support tickets are recorded for quality assurance and issue resolution purposes.
• Gaming activity: All game sessions, wagering activity and outcomes are automatically recorded as part of the platform management system.

Hm888 uses the personal information collected for the following purposes. The table below provides a clearer overview of the relationship between the data collected and its intended use:

In addition to the above, hm888 also uses aggregated and anonymised data for internal analytics to improve service quality, develop new platform features and understand overall usage patterns without identifying any specific individual.

Hm888 does not sell, rent or disclose your personal information to third parties for their own marketing purposes. However, under certain circumstances, we may share your information with the following parties:

• Payment service providers: Required financial information is shared with licensed payment providers such as FPX, DuitNow, and e-wallet providers to process your transactions securely.
• Game software providers: Minimal game data is shared with our licensed game providers to ensure a smooth and fair gaming experience.
• Regulatory authority: hm888 will fully comply with any lawful request from regulatory authorities, law enforcement agencies or courts of competent jurisdiction.
• Analytics services: Non-identifiable usage data is shared with analytics platforms to help us understand platform performance and improve the user experience.
• Affiliated companies: In the event of a merger, acquisition or business asset transfer, user information may be transferred to the new entity subject to notification to players.

Hm888 retains your personal data for as long as necessary to fulfil the purposes outlined in this Policy or as required by law. Our data retention guidelines are as follows:

• Active account data: Retained for the duration your account is active and up to 7 years after account closure for legal compliance purposes.
• Financial transaction records: Retained for a minimum of 7 years in line with Malaysian financial legal requirements.
• KYC documents: Retained for the period required by regulatory authorities, typically 5 to 7 years.
• Support communication logs: Retained for 2 years from the date of last communication.
• Cookie and session data: Session cookies are deleted when you close your browser; persistent cookies are stored for the duration specified in the cookie settings.

In terms of security measures, hm888 implements multiple layers of technical and organisational protection to safeguard your data, including:

• Data encryption in transit using TLS 1.3 and 256-bit SSL protocols.
• Data encryption at rest for sensitive information such as financial details and KYC documents.
• Strict role-based access controls for internal staff — only authorized personnel can access sensitive player data.
• Regular security audits by independent third parties to identify and address any vulnerabilities.
• Continuously operating intrusion monitoring and detection systems.
• A comprehensive incident response plan to address any data breaches quickly and effectively.

Hm888 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. We use the following types of cookies:

• Essential cookies: Required for core platform functions such as login authentication, session security and language preferences. These cookies cannot be disabled.
• Performance cookies: Collecting information about how you use our platform to help us identify technical issues and improve performance.
• Functional cookies: Remembering your preferences such as username, language, and display settings to deliver a more personalized experience.
• Analytics cookies: Helping us understand usage patterns, the most popular pages, and how users navigate our platform.
• Marketing cookies: Used to display relevant offers and promotions based on your interests and activity on the platform.

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect platform functionality. Please note that disabling all cookies will prevent you from logging in to your account.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable data protection principles, you have the following rights regarding your personal information:

• Right to access: You have the right to request a copy of the personal information we hold about you. Requests can be submitted via our support email and will be processed within 14 business days.
• Right to rectification: If any of your personal information is inaccurate or incomplete, you have the right to request that it be corrected. Some information can be updated directly through your account profile settings.
• Right to restriction of processing: In certain circumstances, you may request that we restrict how we use your data, particularly while any dispute is under investigation.
• Right to withdraw consent: For data processing based on your consent (such as marketing communications), you may withdraw your consent at any time through your account settings.
• Right to complain: If you believe that hm888 has violated your privacy rights, you have the right to lodge a complaint with the relevant data protection authority.

The hm888 platform is exclusively for individuals aged 18 and above. We do not intentionally collect, store or process any personal information from minors under the age of 18.

If we find that we have inadvertently collected personal data from someone under the age of 18, we will take immediate steps to delete that information and close the relevant account. If you become aware that a child has registered on our platform, please notify us promptly via our support email.

In operating our global operations, your personal data may be transferred to, stored in or processed in countries other than Malaysia. This may occur when our servers or third-party service providers operate outside Malaysia.

Hm888 ensures that any international data transfers are carried out with adequate safeguards, including:

• Ensuring recipients comply with data protection standards equivalent to or higher than Malaysia's PDPA.
• Executing binding data processing agreements with all third parties that receive your data.
• Ensuring data is transmitted via encrypted channels at all times.

Hm888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements or platform developments. The latest version of this Policy will always be available on this page with the "Updated" date adjusted accordingly.

For significant changes, we will notify you through:

• Email notifications sent to the address registered with your account.
• Clear notices on our platform's home page.
• In-app notifications during your next login session.

Your continued use of the hm888 platform following any changes to this Privacy Policy will be considered acceptance of those changes. If you do not agree with the updated version, you have the right to close your account by contacting our support team.

If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your personal data, please do not hesitate to contact us through the following channels:

• Email: [email protected] (response within 1 to 2 business days)
• Live Chat: Available 24 hours a day, 7 days a week via the chat icon at the bottom corner of the platform
• FAQ: Visit our FAQ page for answers to frequently asked questions

Our data protection team is available to assist you in Malay and English. We are committed to responding to all privacy-related inquiries seriously and within a reasonable timeframe.