Privacy Policy

This Privacy Policy ("Policy") sets out the manner in which H2M88 ("H2M88", "we", "us", "our"), the operator of the online sports betting and casino platform accessible athttps://h2m88.cam, collects, processes, stores, shares, and protects personal data provided by or generated through the use of the H2M88 platform and its associated services.

H2M88 respects the privacy rights of all players and is committed to handling personal data responsibly, transparently, and in accordance with applicable data protection legislation. This Policy applies to all users of the H2M88 platform, including registered players, prospective registrants who browse the platform without completing registration, and any other individual whose personal data is processed by H2M88 in connection with the operation of its services.

By accessing the H2M88 platform, completing registration, or otherwise providing personal data to H2M88, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you should discontinue use of the platform immediately.

For the purposes of this Policy, the following terms carry the meanings defined below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, email address, residential address, date of birth, financial account details, device identifiers, and IP addresses.
• "Processing" — any operation or set of operations performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, or deletion.
• "Data Controller" — H2M88, the entity that determines the purposes and means of processing Personal Data collected through the platform.
• "Data Processor" — a third party that processes Personal Data on behalf of H2M88, subject to contractual obligations and data protection standards.
• "Player" / "User" / "you" — any natural person who accesses or uses the H2M88 platform, whether registered or unregistered.
• "Platform" — the H2M88 website, mobile-optimised interface, and all associated digital services accessible at https://h2m88.cam.
• "KYC" — Know Your Customer; the identity verification process mandated by H2M88's licensing obligations to confirm player identity, age, and source of funds.
• "Cookies" — small text files placed on a user's device by the platform that store session, preference, and analytical data.

H2M88 collects Personal Data through several channels. The categories of data collected, and the primary source of each, are set out in the table below:

H2M88 does not collect Special Categories of Personal Data (such as racial or ethnic origin, religious beliefs, health information, or biometric data) unless this is expressly required to comply with a regulatory obligation, in which case the Player will be notified in advance.

H2M88 processes Personal Data for the following purposes. Each purpose is linked to at least one lawful basis as described in Section 5:

• Account Creation and Management: To register your account, verify your identity and age eligibility, and maintain your account in good standing throughout your use of the platform.
• Payment Processing: To process deposits and withdrawals via Malaysian payment methods (including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank) and cryptocurrency networks, and to reconcile your transaction history.
• KYC and Regulatory Compliance: To verify your identity, confirm your eligibility to use the platform, comply with anti-money laundering (AML) obligations, and respond to lawful requests from regulatory authorities.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, multi-accounting, bonus abuse, and other violations of our Terms and Conditions.
• Platform Operation and Improvement: To operate, maintain, and improve the technical functionality of the platform, analyse player behaviour patterns to optimise the user experience, and conduct internal reporting and analytics.
• Customer Support: To respond to your queries, resolve disputes, process complaints, and provide ongoing customer assistance via live chat and email.
• Responsible Gambling: To implement and monitor responsible gambling tools including deposit limits, session reminders, and self-exclusion orders, and to identify players whose usage patterns may indicate problem gambling behaviour.
• Marketing Communications: Where you have provided explicit consent, to send promotional emails, bonus notifications, and platform updates. You may withdraw marketing consent at any time via your account settings or by contacting support.

H2M88 processes Personal Data only where a valid lawful basis exists. The primary legal bases relied upon are as follows:

• Contractual Necessity: Processing required to perform our obligations under the Terms and Conditions entered into with you when you register an account — including account management, payment processing, and customer support.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC verification, AML reporting obligations, and responses to lawful data requests from competent authorities.
• Legitimate Interests: Processing carried out in pursuit of H2M88's legitimate business interests, including fraud detection, platform security, internal analytics, and service improvement, where such interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily applicable to marketing communications. You have the right to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

H2M88 does not sell, rent, or trade your Personal Data to any third party. We may share Personal Data with the following categories of recipients only where strictly necessary:

• Payment Service Providers: Licensed financial institutions and payment processors (including DuitNow, FPX gateway operators, e-wallet providers, and cryptocurrency network facilitators) that process your deposit and withdrawal transactions. These processors handle data only as instructed by H2M88 and are bound by confidentiality obligations.
• Identity Verification Partners: Accredited KYC and AML compliance service providers engaged to verify identity documents and screen players against sanctions and politically exposed persons (PEP) databases.
• Game Studio Providers: Licensed game studios whose products are integrated into the H2M88 platform may receive limited technical and session data necessary to deliver their game software. Such studios are contractually prohibited from using player data for any purpose other than game delivery and auditing.
• IT Infrastructure Providers: Cloud hosting, content delivery, and cybersecurity service providers engaged to maintain the technical operation of the platform. Data shared with these providers is subject to strict data processing agreements.
• Regulatory and Law Enforcement Authorities: Where required by a court order, regulatory direction, or applicable law, H2M88 will disclose Personal Data to competent authorities. H2M88 will notify the relevant player where legally permissible to do so before any such disclosure.
• Professional Advisors: Legal counsel, auditors, and compliance consultants acting in a professional advisory capacity, bound by confidentiality obligations.

The H2M88 platform uses cookies and similar tracking technologies to operate core platform functions, improve the user experience, and gather analytical data about platform usage. The types of cookies used are described below:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies, security tokens, and load-balancing identifiers. These cookies cannot be disabled without preventing core platform functions from operating.
• Functional Cookies: Used to remember your preferences such as language settings, display options, and recently played games, so that you do not have to reconfigure these settings on each visit.
• Analytical Cookies: Used to collect anonymised data about how players navigate and interact with the platform, enabling H2M88 to identify performance issues, optimise page layouts, and improve the overall user experience.
• Security Cookies: Used to detect and prevent fraudulent activity, unusual login patterns, and potential account compromise attempts.

H2M88 does not use third-party advertising cookies or behavioural targeting cookies that track you across external websites. You may manage cookie preferences through your browser settings. Please note that disabling certain cookie categories may impair the functionality of the platform.

H2M88 implements a comprehensive set of technical and organisational security measures to protect Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the H2M88 platform is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Data Encryption at Rest: Sensitive Personal Data — including identity documents and financial data — is encrypted at rest using AES-256 encryption within our secure data infrastructure.
• Access Controls: Internal access to Personal Data is restricted on a strict need-to-know basis. Staff with access to Personal Data undergo regular data protection training and are bound by confidentiality obligations.
• Two-Factor Authentication: Players are encouraged to enable two-factor authentication (2FA) on their accounts for an additional layer of access security.
• Regular Security Audits: H2M88 engages independent cybersecurity professionals to conduct periodic penetration testing and vulnerability assessments of the platform.
• Incident Response: H2M88 maintains a documented data breach response procedure. In the event of a confirmed data breach that poses a risk to Player rights, affected individuals will be notified without undue delay.

While H2M88 takes all reasonable steps to protect your Personal Data, no transmission over the internet or electronic storage system is wholly immune to risk. You are responsible for maintaining the security of your account credentials and should notify H2M88 immediately if you suspect any unauthorised access to your account.

H2M88 retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory obligations, and to resolve any disputes or enforce our agreements. The following retention periods apply as general guidelines:

• Active Account Data: Retained for the full duration of the Player's account and for a minimum period of 5 years following permanent account closure.
• Transaction Records: Deposit, withdrawal, and betting history records are retained for a minimum of 7 years in compliance with financial record-keeping requirements applicable to licensed gaming operators.
• KYC and Identity Verification Records: Retained for a minimum of 5 years following account closure or the last relevant transaction, in accordance with AML regulatory obligations.
• Support Communications: Live chat transcripts and email correspondence are retained for a minimum of 3 years from the date of the interaction.
• Marketing Consent Records: Records of consent to marketing communications are retained for the duration of the consent and for2 years following withdrawal of consent.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with H2M88's data destruction procedures. Anonymised, aggregated data that no longer identifies any individual may be retained indefinitely for statistical and analytical purposes.

Subject to applicable data protection law, you have the following rights in relation to the Personal Data that H2M88 holds about you:

• Right of Access: You have the right to request a copy of the Personal Data that H2M88 holds about you, along with information about how that data is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete Personal Data that H2M88 holds about you.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected. Note that this right is subject to overiding legal obligations requiring H2M88 to retain certain data (e.g., AML and transaction records).
• Right to Restriction of Processing: You may request that H2M88 restrict the processing of your Personal Data in certain circumstances, such as while the accuracy of the data is being contested.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your Personal Data based on H2M88's legitimate interests, including the right to opt out of direct marketing at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of any processing carried out prior to withdrawal.

To exercise any of the above rights, please contact H2M88's support team with your account details and a clear description of your request. All requests will be acknowledged within 72 hours and fulfilled within 30 calendar days, or soner where reasonably practicable.

The H2M88 platform is strictly intended for persons aged21 years and above. H2M88 does not knowingly collect, process, or retain Personal Data of individuals under the age of 21. Registration by, or on behalf of, any person under the age of 21 is strictly prohibited and constitutes a material breach of H2M88's Terms and Conditions.

During the registration and KYC process, H2M88 takes reasonable steps to verify that prospective players meet the minimum age requirement. Any account found to have been registered by an individual under the age of 21 will be immediately suspended, all funds will be frozen pending investigation, and the matter will be reported to the relevant licensing authority.

If a parent or guardian becomes aware that a minor has provided Personal Data to H2M88 without their knowledge or consent, they should contact H2M88 support immediately. Upon verification, all relevant Personal Data will be deleted promptly.

H2M88 operates as an international online gaming platform and may transfer Personal Data to service providers and infrastructure partners located outside Malaysia. Such international transfers may occur where H2M88 uses cloud infrastructure, data processing, or KYC verification services hosted in other jurisdictions.

Where Personal Data is transferred internationally, H2M88 ensures that appropriate safeguards are in place to protect that data, including:

• Entering into standard contractual data processing clauses with the receiving entity;
• Transfering data only to jurisdictions that maintain an adequate level of data protection as recognised by applicable standards; and
• Applying technical measures such as end-to-end encryption to data in transit.

By using the H2M88 platform and providing your Personal Data, you acknowledge and consent to such international transfers, subject to the safeguards described above.

The H2M88 platform integrates with third-party services, including licensed game studios, payment processors, and identity verification providers. While H2M88 exercises due diligence in selecting partners who maintain appropriate privacy and security standards, H2M88 is not responsible for the privacy practices of independent third-party services operating under their own policies.

The H2M88 platform does not contain links to external third-party websites beyond those necessary for payment processing. Players should review the privacy policies of any external services they interact with independently.

H2M88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in legal requirements, regulatory guidance, business operations, or data processing practices. Material changes to this Policy will be communicated to registered Players via the email address on their account and/or by a prominent notice on the platform, with a minimum of 14 days' advance notice before the amended Policy takes effect.

The date of the most recent revision is shown in the "Last Updated" notice at the top of this page. Continued use of the H2M88 platform following the effective date of any amendment constitutes acceptance of the revised Policy. Players who do not accept the amended Policy should cease use of the platform and may request account closure in accordance with the Terms and Conditions.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your Personal Data by H2M88, please contact our Data Protection team using the details below. We take all privacy enquiries seriously and will respond to your request within the timeframes specified in Section 10.

For matters relating to responsible gambling, self-exclusion, or account restrictions, please visit our dedicated Responsible Gambling page, where additional tools and support information are available.