Hiu128 Privacy Policy – Malaysian Member Personal Data Protection

1. Introduction

Hiu128 ("we", "Platform", or "hiu128") is an online entertainment platform operating under the domain hiu128.win, providing sports betting, live casino, and slot games services to members in Malaysia. We understand that your trust is the foundation of the relationship we build together.

This Privacy Policy is drafted to give you full clarity on how your personal information is handled by hiu128. We are committed to ensuring that every piece of data you provide us is protected to the highest standard, in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA).

This policy applies to all information collected through the hiu128.win website, iOS and Android mobile apps, and any communication channels we provide to members, including live chat, support email, and in-app notification systems.

If at any time you disagree with any part of this Privacy Policy, you have the right to stop using the platform and request account closure along with deletion of your personal data.

2. Information We Collect

Hiu128 collects your personal information through several channels depending on how you interact with our platform. The following are the categories of information we collect:

We only collect information that is strictly necessary for the stated purposes. hiu128 does not collect sensitive data such as your medical information, religious beliefs, or political views.

3. How We Use Your Data

All information we collect is used for pre-defined, lawful purposes. hiu128 uses your personal data for the following purposes:

• Account Management: Processing registrations, verifying identity through KYC, managing account balances, and ensuring your account runs smoothly at all times.
• Transaction Processing: Securely verifying and processing deposits and withdrawals via local payment methods such as DuitNow, FPX, Touch 'n Go eWallet, and GrabPay.
• Platform Security: Detecting and preventing fraud, money laundering, unauthorised access, and any activity that violates hiu128's Terms and Conditions.
• Customer Support: Providing technical support, answering enquiries, resolving complaints, and improving the quality of our customer support service.
• Service Improvement: Analysing overall platform usage patterns (not at an individual level) to improve the user experience, enhance platform performance, and develop new features.
• Marketing Communications: Sending information about promotions, bonuses, and exclusive offers that may interest you — subject to the communication preferences you have set in your account profile.
• Legal Compliance: Fulfilling legal obligations under Malaysia's PDPA, including retaining transaction records for the period prescribed by law.

4. Sharing Information with Third Parties

Hiu128 does not sell or rent your personal data to any third party for marketing or commercial purposes. However, there are limited situations where we may need to share your information with trusted parties:

• Payment Providers: Required transaction information is shared with payment service providers such as local banks and e-wallet operators solely for the purpose of processing your deposits and withdrawals.
• KYC Service Providers: Your identity documents may be submitted to third-party identity verification service providers who have signed strict confidentiality agreements with hiu128.
• Game Providers: Usernames and account IDs are shared with third-party game providers (slot and live casino providers) to enable you to access their games through the hiu128 platform.
• Legal Authorities: hiu128 will disclose required information to Malaysian authorities such as the police, courts, or regulatory bodies when mandated by law or a valid court order.
• Strategic Business Partners: In the event of a merger, acquisition, or sale of business assets, user data may be transferred to the acquiring party — with prior notice given to all affected members.

All third parties receiving data from hiu128 are required to comply with data protection standards equal to or higher than our own, and may only use that data for the purposes specified in their agreement with us.

5. Data Security

Protecting your data is hiu128's number one priority. We continuously invest in sophisticated cybersecurity infrastructure to ensure your information is always safeguarded against both external and internal threats.

The technical security measures we implement include:

• Encryption of Data at Rest and in Transit: All data — whether in transit across our network or stored in our databases — is protected by AES-256 encryption that cannot be decrypted without the correct key.
• Two-Factor Authentication (2FA): The 2FA feature that members can enable adds an extra layer of security, ensuring only you can access your account even if your password is compromised.
• 24/7 Monitoring: Our systems are monitored continuously 24 hours a day, 7 days a week, to detect any suspicious activity or intrusion attempts in real time.
• Firewall & Intrusion Detection System: The hiu128 server network is protected by enterprise-grade firewalls and an intrusion detection system (IDS) that is regularly updated.
• Independent Security Audit: We conduct penetration testing and independent security audits at least twice a year to identify and address any system vulnerabilities.
• Internal Access Controls: Access to member personal data by internal hiu128 staff is restricted under a minimum privilege principle — only staff who genuinely require access to perform their duties are granted permission.

6. Cookies & Tracking Technologies

The hiu128 platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform operates at its best. Cookies are small data files stored in your web browser when you visit our site.

Types of cookies we use:

• Essential Cookies: These cookies are required for the platform's core functions, such as maintaining your login session, processing transactions, and ensuring account security. They cannot be disabled as the platform will not function properly without them.
• Performance Cookies: We use these cookies to collect anonymous information about how members use the platform — which pages are visited most frequently, page response times, and any technical issues encountered. This information helps us improve platform performance.
• Functional Cookies: These cookies allow the platform to remember your preferences — such as interface language, display settings, and your favourite game selections — to deliver a more personalised experience.
• Analytics Cookies: Used to understand overall platform usage patterns for strategic planning and new feature development purposes.

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect the functionality of the hiu128 platform.

7. Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data that we hold:

To exercise any of the above rights, please contact the hiu128 support team via live chat or email. We will verify your identity before processing any personal data request.

8. Data Retention & Deletion

Hiu128 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required by Malaysian law. The following are our data retention period guidelines:

• Active Account Data: For as long as your account remains active on the hiu128 platform, your personal data will be retained to allow you full access to our services.
• Financial Transaction Records: All deposit, withdrawal, and financial activity records are retained for seven (7) years from the transaction date in accordance with Malaysia's anti-money laundering legal requirements.
• KYC Documents: Copies of identity documents and proof of address are retained for five (5) years after account closure for legal compliance purposes.
• Communication Logs: Live chat conversation records and support emails are retained for two (2) years for quality control and dispute resolution purposes.
• Technical Log Data: Server logs and technical data are retained for 90 days before being automatically deleted.

Once the specified retention period has expired, or upon your request for data deletion (where no legal obligation prevents it), your data will be permanently erased from all hiu128 systems using secure deletion methods that ensure the data cannot be recovered.

9. Changes to the Privacy Policy

Hiu128 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, business requirements, or new legal obligations. Any amendment will take effect immediately upon publication on this page.

For material amendments — that is, changes that significantly affect how we use your data — hiu128 will take the following steps to ensure you are informed:

• Sending in-app notifications to all active members at least 14 days before any amendments take effect.
• Sending notification emails to the email address registered to your account.
• Displaying clear notices on the hiu128 platform's home page and login page.
• Updating the "Last Updated" date at the top of this Privacy Policy page.

Continued use of the hiu128 platform after any changes to the Privacy Policy take effect will be considered your acceptance of the revised terms. If you do not agree with any changes, please contact our support team to close your account.

10. Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, the hiu128 Data Protection Officer (DPO) team is ready to assist you.

You can reach us through the following methods:

• Live Chat: Available 24 hours a day, 7 days a week via the chat icon in the mobile app or at the bottom-right corner of the hiu128 website.
• Privacy Email: [email protected] — exclusively for data privacy enquiries and data subject rights requests.
• General Support Email: [email protected] — for general account and service enquiries.

All data privacy requests will be acknowledged within one (1) business day and fully resolved within 14 business days. For more complex issues, we will notify you of the expected resolution timeline.

For more information about your rights, you may also refer to the following pages:

• hiu128 Terms and Conditions — for the overall terms of use of the platform.
• Responsible Gaming — for self-control tools and help resources.
• Frequently Asked Questions (FAQ) — for answers to the most frequently asked questions by members.