Privacy Policy h2m – Your Personal Data Protection

H2m collects your personal information solely for stated and legitimate purposes. The type of information we collect varies depending on how you interact with our platform.

Information You Provide Directly

• Full name as stated on official identification documents.
• Active email address for account communications and promotions.
• Registered Malaysian mobile phone number.
• Date of birth for age verification of at least 18 years.
• Payment method details including bank account numbers or e-wallet accounts used.
• A copy of your identity document such as MyKad or passport during the KYC process.

Information Collected Automatically

• IP address and estimated geolocation data for security and verification purposes.
• Device type, operating system, and browser version in use.
• Platform activity log data including login times, games played, and wagering values.
• Cookie data and related tracking technologies – further details in Section 6.

Every piece of information we collect is used for a clear purpose permitted by law. We do not process your data for any other purpose without first obtaining your consent.

• Account Management: Creating, verifying, and maintaining your user account on the h2m platform.
• Payment Processing: Facilitating deposits, withdrawals, and financial transactions related to your gaming account.
• Identity Verification (KYC): Complying with legal requirements related to Anti-Money Laundering (AML) and user age verification.
• Service Communications: Sending important notifications related to your account, security, transactions, and platform updates.
• Platform Improvement: Analyzing usage patterns in aggregate and anonymized form to improve the user experience.
• Fraud Detection: Monitoring suspicious activity to protect your account and the integrity of the platform.
• Legal Compliance: Fulfilling reporting obligations to the relevant authorities in accordance with Malaysian law.

All data processing is carried out on a valid legal basis, namely user consent, contractual necessity, legal obligation, or legitimate legal interest.

H2m does not sell, rent, or transfer your personal data to third parties for marketing purposes. Information sharing only occurs in the following limited situations:

• Payment Processors: Information required to complete transactions is shared with approved payment processors that comply with PCI DSS.
• Game Providers: Minimum technical data is shared with game software providers to ensure smooth gameplay functionality.
• Legal Requirements: h2m will disclose information to government authorities or law enforcement when required by law or court order.
• Technical Service Providers: Third parties that assist in the technical operations of the platform, such as cloud services and security monitoring — all subject to strict confidentiality agreements.

H2m takes data security extremely seriously. We continually invest in technologies and procedures that keep your personal data safe at all times.

• 256-bit SSL/TLS encryption for all data communications between the platform and your device.
• Two-factor authentication (2FA) available for all user accounts.
• Real-time security threat monitoring by a dedicated IT security team.
• Regular internal and external security audits conducted by certified independent parties.
• Strict internal access controls — only authorized personnel may access user data, and only within the required scope.
• Established incident response procedures to ensure any security breaches are handled swiftly and accurately.

As a registered h2m platform user, you have rights protected under the Malaysia Personal Data Protection Act 2010. Below is a summary of your rights and how to exercise them:

To exercise any of the above rights, contact the h2m support team via live chat or email. We will process your request within 14 business days.

H2m uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how our platform is used. Below are the types of cookies we use:

You can manage your cookie settings through your web browser. Please note that blocking essential cookies may affect platform functionality.

In certain circumstances, your personal data may be processed or stored on servers located outside Malaysia, specifically for cloud infrastructure and global technical support service requirements.

H2m ensures that any such data transfers are carried out with adequate safeguards, including:

• Binding data processing agreements with recipient parties that require equivalent or higher protection standards than PDPA 2010.
• Selection of data centers and cloud service providers that comply with international security standards ISO 27001.
• A data transfer risk assessment is conducted before any new cross-border transfer is approved.

H2m retains your personal data only for as long as necessary to fulfil the purposes stated in this policy, or to comply with applicable legal obligations.

• Active Account Data: Retained for the duration your account remains active and operational.
• KYC & Transaction Data: Retained for a minimum of 7 years from the date of the last transaction, in accordance with Malaysia's AML legal requirements.
• Activity Logs: Retained for 2 years for security and investigation purposes.
• Closed Account Data: Deleted or anonymised within 90 days of account closure, unless required to be retained longer by law.

The h2m platform is strictly for users aged 18 and above. We do not intentionally collect or process personal data from individuals under the age of 18.

If we determine that we have collected data from underage users without valid consent, the account in question will be closed immediately and all collected data will be deleted as soon as possible. Parents or guardians who believe their child has registered on the h2m platform are requested to contact our support team immediately.

H2m reserves the right to update or amend this Privacy Policy at any time to reflect changes in operational practices, legal requirements, or platform improvements. Any amendments take effect upon publication on this page.

For significant changes, we will notify users via:

• In-platform notification upon your next login.
• Email sent to the address registered to your account.
• Updates the "Last updated" date shown at the top of this page.

Your continued use of the h2m platform after any amendments are published will be considered as your acceptance of the updated terms. We encourage you to review this page periodically.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact the h2m Data Protection Officer (DPO) through the following channels:

• Privacy Email: [email protected]
• Live Chat: Available 24/7 via the support icon at the bottom corner of the platform.
• Contact Page: About Us

We are committed to responding to all privacy-related inquiries within 3 business days, and resolving formal complaints within 14 business days from the date of receipt.