Hijau88 Privacy Policy – Malaysia Player Data Protection

Hijau88 collects various types of personal data when you register, use the platform, or interact with our services. This data collection is necessary to deliver a secure, fair experience and to comply with applicable legal requirements.

A. Data You Provide Directly

• Registration Information: Full name, national identification number (MyKad) or passport, date of birth, gender, Malaysian mobile number, and email address.
• Financial Information: E-wallet details (Touch 'n Go, GrabPay, Boost, ShopeePay), DuitNow account numbers, and FPX banking information required to process deposits and withdrawals in RM.
• Verification Documents (KYC): A copy of your MyKad or passport, along with any other supporting documents required during the Know Your Customer process.
• Communication Information: Any messages, complaints, or enquiries you send to the hijau88 customer support team via live chat, email, or WhatsApp.
• Account Preferences: Language settings, personal deposit limits, notification preferences, and any other profile information you choose to share.

B. Automatically Collected Data

• Device & Connection Data: IP address, device type, operating system, browser type and version, screen resolution, and time zone.
• Platform Activity Data: Login and logout activity, pages visited, session duration, matches viewed or wagered on, casino game types played, and full transaction history.
• Geolocation Data: General geographic location based on IP address, for legal compliance purposes and to verify that you are accessing the platform from a permitted region.
• Cookie Data: Information collected through cookies and similar tracking technologies to improve the user experience and analyse platform usage. Please refer to the Cookies section for more details.

The personal data we collect is used solely for legitimate and specific purposes. hijau88 does not use your data for any purpose outside the scope of the services you agreed to at registration, unless you give explicit consent or we are required to do so by law.

• Service Delivery: Creating and managing your account, processing deposits via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, or FPX, processing withdrawals in MYR, and providing access to all platform features including Sports Betting and casino games.
• Identity Verification (KYC): Verifying your identity, confirming that you meet the minimum age requirement of 18 years, and complying with legal requirements related to anti-money laundering.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, multiple account usage, system manipulation, and any behaviour that violates the platform's Terms & Conditions.
• Customer Support: Responding to enquiries, resolving complaints, and providing technical support via live chat, email, and WhatsApp in both Bahasa Melayu and English.
• Responsible Gaming: Monitors betting patterns to identify players who may be experiencing problems, enforces personal deposit limits you have set, and manages self-exclusion preferences.
• Service Communications: Sends important notifications regarding your account, transactions, promotions you are eligible for, and platform updates via email or SMS to your Malaysian mobile number.
• Platform Improvement: Analysing aggregated, anonymised usage data to understand how players use the platform and identify opportunities to improve the user experience.
• Legal Compliance: Fulfilling applicable legal obligations, including reporting to relevant authorities where required under Malaysian law.

Hijau88 does not sell players' personal data to any third party. However, there are limited situations where we may need to share data with certain parties for service operational or legal compliance purposes.

Authorised Service Providers

We share necessary data with third-party service providers who support our platform operations, subject to strict confidentiality agreements:

• Payment Processors: E-wallet and banking providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX) receive the transaction information necessary to process deposits and withdrawals in MYR only.
• Game Software Providers: Licensed casino and sports game providers receive non-personally identifiable account IDs for technical purposes only — not your name or personal details.
• KYC Auditing Services: Third-party identity verification service providers who assist us in meeting KYC requirements, subject to strict data protection agreements.
• Analytics Services: Non-personally identifiable (anonymised) usage data shared with analytics providers to help us understand and improve the platform.

Mandatory Disclosure to Authorities

• hijau88 will disclose players' personal data to the relevant Malaysian authorities when required by a court order, regulatory directive, or applicable Malaysian law.
• In cases of criminal investigation involving money laundering or fraud, we are legally required to cooperate fully with the relevant authorities, including the PDRM and BNM.
• We will endeavour to notify you of any such disclosure before or after it occurs, unless prohibited by law or court order.

The security of your personal data is hijau88's top priority. We invest in industry-grade security infrastructure and take a multi-layered approach to protecting your information from unauthorised access, alteration, disclosure, or destruction.

Technical Security Measures

• Data Encryption in Transit: All communications between your device and hijau88's servers are encrypted using TLS 1.3 with 256-bit SSL certificates that are regularly renewed.
• Data Encryption at Rest: All personal data stored on hijau88 servers is encrypted using AES-256, ensuring it remains unreadable even in the event of an unauthorised access attempt.
• Two-Factor Authentication (2FA): 2FA is available for all player accounts and is strongly recommended as an additional layer of security at login.
• Continuous Monitoring: Our security monitoring system operates 24/7 to detect suspicious activity, unauthorised access attempts, and potential security threats.
• Internal Access Controls: Access to player personal data within hijau88 is restricted on a least-privilege basis – only staff who require access to perform their duties may view the relevant data.
• Regular Backups: Data is backed up regularly to secure, isolated locations to ensure service continuity in the event of a technical failure.

Your Security Responsibilities

While hijau88 implements comprehensive security measures, you also play an important role in protecting your account. Please ensure you use a strong and unique password, do not share your login credentials with anyone, log out of the platform when using a public device, and contact support immediately if you suspect any unauthorised activity on your account.

Hijau88 uses cookies and similar tracking technologies to enhance the user experience, analyse platform usage, and maintain session security. Below is an explanation of the types of cookies we use.

You can manage cookie settings through your browser preferences. However, disabling mandatory cookies may affect platform functionality. Please note that third-party cookies from casino game providers may be used within embedded games – please refer to the relevant provider's privacy policy for more information.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have specific rights regarding your personal data held by hijau88. We are committed to making it straightforward for you to exercise these rights, without unnecessary complications.

How to Submit a Privacy Rights Request

To exercise any of the rights above, please contact our Data Protection Officer by email at support@hijau88.click with the subject line "Privacy Rights Request". Include your full name, registered phone number, and a description of your request. hijau88 will acknowledge receipt within 3 business days and aim to resolve the request within 14 business days. For complex cases, we may require up to 30 business days and will notify you accordingly.

Hijau88 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable Malaysian law.

• Active Account Data: For the duration your account remains active, and for 5 years after account closure, to fulfil legal obligations and resolve any disputes that may arise.
• Financial Transaction Records: A minimum of 7 years after the transaction occurs, in line with Malaysia's financial reporting and tax legislation requirements.
• KYC Records: Minimum 5 years after the business relationship ends, in compliance with the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001.
• Communication & Support Logs: 2 years after the closure of the related support ticket, for quality control and dispute resolution purposes.
• Marketing Data: Until you withdraw consent or request deletion, whichever comes first.
• Cookie Data: As outlined in the cookie table in Section 5, retention ranges from session-only to a maximum of 1 year, depending on the cookie type.

Once the retention period expires or a valid erasure request is received, hijau88 will securely delete or anonymise your data using methods that ensure it cannot be recovered by unauthorised parties.

The hijau88 platform is strictly for individuals aged 18 and above. hijau88 does not knowingly collect or process personal data from anyone under the age of 18.

If you are a parent or guardian who believes your underage child has registered an account with hijau88, please contact us immediately at support@hijau88.click. We will investigate promptly, close the account in question, and delete all related data once confirmed. Strict age verification is conducted during registration and at the time of the first withdrawal to prevent use of the platform by minors.

Hijau88 may update this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or developments in how we handle your personal data.

• You will be notified of any material changes to this Privacy Policy via email to the address registered on your account, or through a prominent notice on the platform's homepage, at least 14 days before the changes take effect.
• The "Last Updated" date at the top of this document will be revised whenever changes are made. We encourage you to review this Privacy Policy periodically.
• Continued use of the hijau88 platform after any changes take effect will be deemed acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account before they come into effect.
• Previous versions of the Privacy Policy are available upon request by emailing our support team.

If you have any questions, concerns, or complaints regarding how hijau88 handles your personal data, or if you wish to exercise any of your privacy rights, please contact our Data Protection Officer through the following channels.

When contacting us regarding privacy matters, please include "Privacy Policy Enquiry" or "Privacy Rights Request" in your message subject line to ensure it is promptly routed to our Data Protection Officer. Include your full name and registered phone number for identity verification purposes.

If you are unsatisfied with our response to your privacy complaint, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia under the Ministry of Digital, in accordance with the provisions of the PDPA 2010.