Privacy Policy H2M –
Your Personal Data Protection

1. Introduction

H2m ("we", "Platform") is committed to protecting the privacy of all users who register and use our services. This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and transparently explains how your personal information is managed from registration through to account closure.

We understand that your trust is the most valuable asset in our care. That is why we never take lightly our responsibility to ensure every piece of data you entrust to us is stored securely and used only for the purposes we have communicated to you.

2. Personal Data We Collect

H2m collects personal information through several means as you use our platform. The type of data collected varies depending on your level of interaction with the platform:

Data Category	Example Information	Primary Purpose
Identity Information	Full name, date of birth, identification card number	KYC & account verification
Contact Information	Email address, phone number	Communication & Support
Financial Information	Bank account number, transaction records	Deposit & withdrawal processing
Technical Data	IP address, device type, web browser	Security & platform improvements
Gaming Data	Betting history, wins, game preferences	Responsible gaming & analytics

We only collect data that is strictly necessary for the stated purposes. We do not collect sensitive information such as your medical records, religious beliefs, or political views.

3. How We Use Your Personal Data

The information you provide to h2m is used responsibly for the following purposes:

• To verify your identity during registration and the KYC process to ensure account security.
• To process deposits and withdrawals accurately and within the stipulated timeframe.
• To contact you regarding account activity, platform updates, and relevant promotional offers.
• To detect and prevent fraud, money laundering, and other suspicious activities.
• To comply with legal obligations and regulations applicable to online gambling platforms.
• To improve user experience based on usage patterns and feedback received.
• To support our responsible gaming programme by identifying members who may need assistance.

H2m will not use your data for any purposes not stated above without obtaining your consent first. Any new use will be communicated through an update to this Privacy Policy.

4. Sharing Information with Third Parties

H2m does not sell or rent your personal data to any party. However, in certain situations, we may share information with the following parties on a strict need-to-know basis:

• Payment service providers — to process your financial transactions securely and efficiently.
• Identity verification service providers — to complete the KYC process as required by regulations.
• Regulatory authorities and law enforcement agencies — when required by law or court order.
• Auditors and legal advisors — limited to the scope of their professional work only.

All third parties involved are bound by strict confidentiality agreements and are only permitted to use your data for the specified purposes. We regularly monitor their compliance.

5. Cookies & Tracking Technologies

The h2m platform uses cookies and similar tracking technologies to enhance your user experience. Cookies are small text files stored on your device when you visit our website.

We use several different types of cookies:

• Essential cookies — required for core platform functions such as login and session security. Cannot be disabled.
• Performance cookies — helps us understand how users interact with the platform for improvement purposes.
• Functional cookies — stores your preferences such as language and display settings for your convenience.
• Analytics cookies — collects anonymous statistical data to help us understand traffic and usage patterns.

You can manage or disable cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of some parts of the h2m platform.

6. Data Retention Period

H2m retains your personal data only for as long as necessary to fulfil the purposes stated in this policy, or as required by applicable law. In general, retention periods are as follows:

• Active account data is retained for the duration of your membership.
• Following account closure, transaction and KYC records are retained for 7 years to comply with financial regulatory requirements.
• Customer support communication logs are retained for 3 years.
• Anonymous analytics data may be retained indefinitely as it contains no personally identifiable information.

Once the retention period ends, your data will be securely deleted using methods that ensure it cannot be recovered.

7. Your Rights as a Data Subject

As an h2m user, you have the following rights regarding your personal data under PDPA 2010:

To exercise any of the above rights, contact our privacy team via the support email listed in the Contact Us section. We will process your request within 14 business days. In complex situations, we may extend this period to 30 business days and will notify you in advance.

8. Data Security Measures

H2m continuously invests in security infrastructure to ensure your data is protected at all times. The technical and organisational measures we implement include:

• 256-bit SSL/TLS encryption for all data transmitted between you and our platform.
• Sensitive data stored in the database is encrypted using industry-standard encryption algorithms.
• Two-factor authentication (2FA) is available for all member accounts as an added layer of security.
• Regular security audits conducted by independent cybersecurity experts.
• Continuous monitoring of suspicious activity and intrusion attempts.
• Mandatory data security training is required for all h2m staff who handle user information.

While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure. In the event of a data breach affecting you, we will notify you and the relevant authorities within the timeframe required by law.

9. Links to Third-Party Sites

The h2m platform may contain references to third-party services such as payment providers and game providers. This Privacy Policy applies solely to the h2m platform and does not cover the privacy practices of any third-party sites or services.

We encourage you to read the privacy policy of each third-party service you use separately. h2m is not responsible for the privacy practices or content of third-party websites.

10. Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer:

We value every piece of feedback from our members and are committed to addressing every request seriously and within a reasonable timeframe.