hijau888 Privacy Policy

This Privacy Policy ("Policy") describes how hijau888 ("hijau888", "we", "us", or "our") collects, uses, stores, discloses, and protects personal data provided by or collected from members and visitors ("you" or "your") in connection with the hijau888 website, mobile application, and all associated services (collectively, the "Platform"). This Policy forms part of and should be read together with our Terms & Conditions.

By registering an account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not access or use the Platform.

1. Introduction

1.1 hijau888 is committed to protecting the privacy and confidentiality of your personal data. This Policy sets out our practices in relation to personal data in compliance with applicable data protection laws and regulations.

1.2 This Policy applies to all personal data collected through the Platform, whether submitted directly by you during account registration, collected automatically through your use of the Platform, or obtained from third-party sources such as payment processors and identity verification providers.

2. Data Controller

2.1 hijau888 is the data controller responsible for your personal data collected through the Platform. As data controller, hijau888 determines the purposes and means by which your personal data is processed.

2.2 For all data protection enquiries, you may contact our Data Protection team at [email protected]. Please note this address is provided for correspondence only and is not a clickable link.

3. Personal Data We Collect

3.1 hijau888 collects the following categories of personal data:

Category	Examples	Source
Identity Data	Full name, date of birth, NRIC or passport number, selfie/photo ID	Provided by you during registration and KYC
Contact Data	Email address, Malaysian phone number, residential address	Provided by you during registration
Financial Data	Bank account details, e-wallet identifiers (TnG, Boost), transaction history	Provided by you; generated through Platform use
Technical Data	IP address, device type, browser type, operating system, login timestamps	Automatically collected
Usage Data	Games played, bet amounts, session duration, feature interactions	Automatically collected
Communications Data	Live chat transcripts, email correspondence, support ticket content	Generated through your interactions with hijau888

3.2 hijau888 does not intentionally collect sensitive personal data (such as racial or ethnic origin, religious beliefs, or health data) other than as may be necessary to comply with responsible gaming obligations or as required by applicable law.

3.3 You are not obligated to provide all requested data. However, failure to provide data marked as mandatory during registration or KYC may prevent us from providing Platform services to you.

4. How We Use Your Personal Data

4.1 hijau888 uses your personal data for the following purposes:

• Account Management: To create, maintain, and administer your hijau888 account, including identity verification and password recovery.
• Service Delivery: To enable you to deposit funds, place bets, participate in promotions, and withdraw winnings.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, account takeovers, and other illegal activities.
• Legal and Regulatory Compliance: To comply with anti-money laundering (AML) requirements, know your customer (KYC) obligations, and applicable gaming regulations.
• Responsible Gaming: To monitor gaming behaviour and identify potential problem gambling indicators, and to apply responsible gaming tools where appropriate.
• Customer Support: To respond to enquiries, complaints, and dispute resolution requests.
• Marketing Communications: To send promotional offers, bonus notifications, and product updates, where you have provided consent or where permitted by applicable law. You may opt out at any time.
• Platform Improvement: To analyse usage patterns and improve the functionality, performance, and content of the Platform.

5. Legal Basis for Processing

5.1 hijau888 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you as a member — including account management, payment processing, and game operation.
• Legal obligation: Processing necessary to comply with AML legislation, KYC requirements, gaming licensing conditions, and other applicable laws.
• Legitimate interests: Processing for fraud prevention, security, and Platform improvement, where such interests are not overridden by your data protection rights.
• Consent: Where hijau888 relies on your consent for a specific processing activity (such as marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing and Disclosure

6.1 hijau888 does not sell, rent, or trade your personal data to third parties for commercial purposes.

6.2 hijau888 may share your personal data with the following categories of recipients:

• Payment processors and e-wallet providers (Touch 'n Go, Boost, Maybank, CIMB, Public Bank, FPX) for the purpose of processing deposits and withdrawals.
• Identity verification and KYC service providers to verify your identity and age in compliance with our licensing obligations.
• Game providers and technology vendors who supply casino games, sports betting services, and Platform infrastructure under data processing agreements with hijau888.
• Regulatory authorities, law enforcement, and financial intelligence units where required by applicable law or court order.
• Professional advisers including lawyers, auditors, and insurers, subject to confidentiality obligations.

6.3 All third-party service providers who process personal data on behalf of hijau888 are required to do so only on our documented instructions and in accordance with data protection requirements equivalent to those imposed on hijau888.

7. International Data Transfers

7.1 hijau888 may transfer your personal data to countries outside Malaysia in connection with the operation of the Platform, including to game providers and technology vendors located internationally. Such transfers are conducted in accordance with applicable data protection law and subject to appropriate safeguards.

7.2 Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection to Malaysia, hijau888 will implement appropriate transfer mechanisms, such as contractual data protection clauses, to ensure the security and integrity of your data.

8. Data Retention

8.1 hijau888 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including compliance with legal and regulatory obligations. The following indicative retention periods apply:

• Account and identity data: Retained for the duration of your membership and for a minimum of five (5) years following account closure, in compliance with AML and gaming regulatory requirements.
• Transaction and financial data: Retained for a minimum of seven (7) years following the relevant transaction date, as required by applicable financial regulations.
• Communications data: Retained for a minimum of three (3) years or longer where required for ongoing dispute resolution or regulatory purposes.
• Technical and usage data: Retained for up to two (2) years for security, fraud detection, and Platform improvement purposes.

8.2 Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with hijau888's data disposal procedures.

9. Cookies and Tracking Technologies

9.1 hijau888 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies: Required for the basic operation of the Platform, including maintaining your login session and security token management. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Used to remember your preferences, language settings, and display options to personalise your experience on return visits.
• Analytics cookies: Used to collect aggregated, anonymised data about how members use the Platform, enabling us to identify performance issues and prioritise improvements.

9.2 hijau888 does not use third-party advertising cookies, retargeting pixels, or social media tracking technologies.

9.3 You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will impair your ability to use core Platform functions including login.

10. Your Data Protection Rights

10.1 Subject to applicable law and verification of your identity, you have the following rights in relation to your personal data held by hijau888:

• Right of Access: To request a copy of the personal data hijau888 holds about you.
• Right to Rectification: To request correction of inaccurate or incomplete personal data.
• Right to Erasure: To request deletion of your personal data, subject to hijau888's legal and regulatory retention obligations.
• Right to Restriction: To request that hijau888 restricts the processing of your personal data in certain circumstances.
• Right to Object: To object to processing based on legitimate interests, including direct marketing.
• Right to Data Portability: To receive your personal data in a structured, commonly used format where processing is based on consent or contract.
• Right to Withdraw Consent: To withdraw consent to processing at any time, where processing is based on consent, without affecting the lawfulness of prior processing.

10.2 To exercise any of the above rights, contact hijau888 at [email protected]. hijau888 will respond within thirty (30) calendar days of receipt of a verified request. Requests may be extended by a further two months where the complexity or volume of requests reasonably requires it, with written notification to you.

11. Security Measures

11.1 hijau888 implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include 256-bit SSL encryption for all data in transit, encrypted storage of sensitive data at rest, access controls restricting internal data access to authorised personnel on a need-to-know basis, regular security audits and penetration testing, and mandatory two-factor authentication for administrative system access.

11.2 In the event of a personal data breach that poses a high risk to your rights and freedoms, hijau888 will notify affected members without undue delay and in accordance with applicable notification obligations.

12. Children's Privacy

12.1 The Platform is strictly for adults aged 21 and above. hijau888 does not knowingly collect personal data from individuals under 21 years of age. If hijau888 becomes aware that it has inadvertently collected personal data from a person under 21, that account will be closed and all associated personal data deleted promptly.

12.2 If you believe a person under 21 has provided personal data to hijau888, please contact us immediately at [email protected].

13. Changes to This Policy

13.1 hijau888 reserves the right to update this Policy at any time. The revised Policy will be published on the Platform with an updated effective date. Where changes are material, hijau888 will use reasonable efforts to notify members via email or in-Platform notification.

13.2 Your continued use of the Platform following publication of a revised Policy constitutes your acceptance of the revised terms. If you do not agree with any change, you may request account closure in accordance with the Terms & Conditions.

14. Contact Us

14.1 For questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the hijau888 Data Protection team. Our customer support is available 24/7 via live chat on the Platform, or in writing to [email protected]. Note that this email address is for correspondence purposes only and is not a clickable link.

14.2 hijau888 targets an initial response to all written data protection enquiries within five (5) business days.