Privacy Policy HB88 — Your Data, Our Responsibility

Welcome to the hb88 Privacy Policy page. This document explains in detail how hb88 collects, uses, stores, and protects your personal information as a user of our online gaming platform. This policy applies to all players who register and use hb88's services, including the official website at hb88.gd and our mobile app.

We understand that your trust is our most valuable asset. That is why we take a transparent and responsible approach in every aspect of data management. All information you provide to us is used solely to enhance your gaming experience and ensure the security of your account.

This policy may be updated from time to time in line with changes in law, technology, or our business practices. Any material changes will be communicated to you via your registered email or an in-account notification.

Hb88 collects several categories of personal information needed to provide a safe, compliant, and high-quality service. Below is a detailed breakdown of the data we collect:

We only collect data that is strictly necessary for the stated purposes. This "data minimisation" principle is at the core of our privacy commitment — we do not collect information simply for the sake of having it.

Every piece of information you provide to hb88 is used for a clear and specific purpose. We do not use your data for unrelated purposes without your consent. The following are the primary purposes of data use:

• Account Management: Creating, maintaining, and securing your player account, including two-factor login verification and security alerts.
• Transaction Processing: Processing deposits and withdrawals quickly and securely via local payment methods such as DuitNow, FPX, Touch 'n Go, Boost, and GrabPay.
• Legal Compliance: Meeting legal requirements including anti-money laundering (AML), Know Your Customer (KYC), and reporting to relevant authorities when required.
• Fraud Prevention: Detecting and preventing suspicious activity, multiple-account use, and any attempts to manipulate our systems.
• Personalise Your Experience: Recommending games suited to your interests, displaying relevant promotions, and customising the interface according to your preferences.
• Responsible Gaming: Monitoring gaming patterns to detect signs of problem gambling and providing appropriate support to players who need it.
• Service Communications: Sending important updates about your account, policy changes, promotions (with your consent), and responses to support enquiries.
• Platform Improvements: Analysing aggregated and anonymised usage data to improve the performance, design, and functionality of our platform.

Hb88 does not sell, rent, or disclose your personal data to third parties arbitrarily. However, there are limited situations where data sharing is necessary and legally permissible:

• Payment Service Providers: Transaction information that must be shared with DuitNow, FPX, and eWallet providers to process your payments. All such providers are bound by strict data protection agreements.
• Game Providers: Minimal technical data required by game software providers (such as Pragmatic Play, Evolution Gaming) to ensure smooth gameplay. They do not receive your full identity information.
• Legal Authorities: When required by law or a valid court order, HB88 will disclose the necessary information to the relevant law enforcement agencies or regulatory bodies.
• Identity Verification Services: KYC information may be shared with approved third-party identity verification service providers, solely for verification purposes.
• Auditors and Professional Advisors: Within a limited scope and subject to professional confidentiality obligations, data may be accessed by our auditors, legal counsel, or security consultants.

In all data-sharing cases, HB88 ensures that the receiving party is bound by appropriate data protection agreements and uses the data solely for the specified purposes.

Data security is an absolute priority at hb88. We continually invest in the latest security infrastructure to ensure your data is protected from unauthorised access, disclosure, alteration, or destruction. Our technical security measures include:

• Data-in-Transit Encryption: All communications between your browser or app and our servers are encrypted using TLS 1.3 with a 256-bit SSL certificate, ensuring no third party can intercept your data in transit.
• Data-at-Rest Encryption: Sensitive data stored in our databases, including financial information and KYC documents, is encrypted using AES-256 standards.
• Strict Access Controls: Only approved staff with a "need-to-know" requirement may access player personal data. All access is logged and audited on a regular basis.
• Two-Factor Authentication: Login to our internal systems is protected by multi-factor authentication to prevent unauthorised access even if a password has been compromised.
• Continuous Security Monitoring: Our security monitoring system operates 24/7, detecting and responding to security threats in real time.
• Regular Security Audits: hb88 undergoes regular independent security audits by accredited cybersecurity firms to ensure our systems remain robust and up to date.

While we take all reasonable precautions, no security system is 100% foolproof. We encourage you to also help protect your account by using a strong password, not sharing your login credentials, and promptly reporting any suspicious activity to our support team.

Hb88 does not retain your personal data longer than necessary. Our data retention periods are determined based on operational needs, legal obligations, and legitimate business interests:

• Active Account Data: Retained for the duration your account is active plus 7 years after account closure, to satisfy financial and tax record requirements.
• Financial Transaction Records: Retained for a minimum of 7 years in compliance with Malaysia's Anti-Money Laundering Act (AMLA) requirements.
• KYC Documents: Retained for 5 years after the business relationship ends, or longer if required by law.
• Security Logs: Retained for 12 months to enable investigation of security incidents if required.
• Support Communication Data: Retained for 3 years for reference and service quality improvement.
• Cookies and Technical Data: Retention periods vary by cookie type — from session-only to a maximum of 2 years for preference cookies.

When data is no longer needed and there is no legal obligation to retain it, we will delete or anonymise it in a secure and irreversible manner.

As a privacy-committed hb88 player, you have the following rights regarding your personal data. We fully respect and facilitate the exercise of these rights:

• Right of Access: You have the right to know what personal data we hold about you and how it is used. Data access requests will be processed within 30 days.
• Right to Rectification: If you find that any information we hold about you is inaccurate or outdated, you may request a correction at any time through your account settings or by contacting customer support.
• Right to Erasure: In certain circumstances, you may request that your personal data be deleted. Such requests will be assessed against the relevant legal and operational requirements.
• Right to Restriction of Processing: You may request that we restrict how we process your data in certain circumstances, such as when you are disputing the accuracy of that data.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, machine-readable format for transfer to another service provider.
• Right to Object: You may object to the processing of your data for direct marketing purposes or in situations where processing is based on our legitimate interests.
• Right to Withdraw Consent: Where data processing is based on your consent, you may withdraw that consent at any time without affecting the validity of prior processing.

Hb88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. The following are the types of cookies we use:

• Essential Cookies (Required): Required for core website functions such as login, session security, and navigation. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies (Optional): Saving your preferences such as language, display settings, and game preferences to personalise your experience.
• Analytics Cookies: Helping us understand how players interact with our platform through aggregated and anonymised data, enabling us to improve our services.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and ensure the security of your account.

You can manage cookie settings through your web browser at any time. However, disabling certain cookies may affect platform functionality. For more information on managing cookies, refer to your web browser's help documentation.

The hb88 platform is exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data of minors. Child protection is our absolute priority.

If you believe we have inadvertently collected information from a minor, please contact us immediately at [email protected]. We will take prompt action to delete the information and close the account in question.

We are always open to addressing any questions, concerns, or complaints regarding your privacy and personal data protection. Our privacy and data protection team is ready to assist you.

• Privacy Email: [email protected] — for privacy inquiries and data rights requests
• Live Chat: Available 24/7 in your account for general inquiries
• Response Time: Privacy inquiries will be answered within 5 business days; data rights requests within 30 business days

If you are not satisfied with how we have handled your privacy concerns, you have the right to lodge a complaint with the relevant data protection authority in Malaysia. However, we encourage you to contact us first so we have the opportunity to resolve the issue directly with you.

This privacy policy forms part of hb88's comprehensive user protection package, together with Terms and Conditions as well as the Responsible Gaming us.