Privacy Policy hijau88 –
Personal Data Protection for Malaysian Members

Hijau88 ("we", "the platform", or "hijau88") takes personal data protection very seriously. As an online casino platform serving Malaysian players, we understand that members' trust in the security of their personal information is the foundation of a healthy relationship between platform and user. Without that trust, nothing we offer truly means anything.

This Privacy Policy explains in detail how hijau88 collects, stores, processes, uses and protects your personal data. It also outlines your rights as a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA) and how you may exercise those rights.

This policy applies to all services offered by hijau88 — including the Live Casino gaming platform, poker, baccarat, jackpot slots, Sports Betting, and e-sports — whether accessed via a mobile browser or desktop computer. It also applies to all communication channels between you and hijau88, including email, live chat, and any forms you complete on our platform.

We do not sell, rent, or trade members' personal data to third parties for their own marketing purposes. This is a core commitment of hijau88 that has never changed since the day we began serving Malaysian players.

Hijau88 collects your personal data from various sources during and after the registration process. We only collect data that is genuinely necessary for the stated purposes and do not gather excessive data that is irrelevant to the services we provide you.

Data you provide directly:

• Identity information: full name, date of birth, Malaysian identity card number (MyKad)
• Contact information: Malaysian phone number, email address, residential address
• Account information: username, password (stored in encrypted form), security questions
• Financial information: details of the payment methods used (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u or CIMB Clicks), deposit and withdrawal history
• Verification documents: copies of identity card, bank statements, or other KYC (Know Your Customer) documents as requested

Automatically collected data:

• Technical data: IP address, browser type, operating system, screen resolution, language settings
• Log data: date and time of access, pages visited, actions taken within the hijau88 platform
• Device data: unique device identifier, mobile device model (if accessing via phone)
• Location data: general geographic location based on IP address (not precise GPS location)
• Cookie data: session information, user preferences, and platform usage analytics

Gaming and betting data:

• A record of all bets placed — including wagers on Malaysia Super League football, EPL, badminton, e-sports, slots, baccarat, poker, and other live casino games
• Win and loss history
• Gaming patterns and betting behaviour for the purpose of identifying problem gambling indicators
• Interactions with hijau88 promotions and bonus features

Personal data collected by hijau88 is used only for lawful and relevant purposes. We do not use your data for anything beyond what is stated below without first obtaining your consent:

• Account management: Creating and maintaining your hijau88 account, verifying your identity, processing login requests, and keeping your account secure at all times.
• Financial transaction processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX, and processing winnings withdrawals to your bank account or e-wallet within the promised timeframe.
• Provision of gaming services: Enabling you to access and enjoy all hijau88 games — Live Casino, Baccarat, poker, jackpot slots and Sports Betting — with an experience tailored to your preferences.
• Bonus eligibility verification: Verifying that you meet the eligibility requirements for the promotions and bonuses you claim, and ensuring hijau88 bonuses are not misused.
• Fraud prevention and anti-money laundering: Detecting and investigating suspicious activity in your account to protect the integrity of the hijau88 platform and the security of all members.
• Legal compliance: Fulfilling legal obligations including Malaysia's PDPA requirements, anti-money laundering (AML) compliance, and mandatory reporting to relevant authorities where required.
• Customer support: Handling and resolving enquiries, complaints and support requests you submit to the hijau88 support team via live chat or email.
• Responsible gaming: Monitoring gaming patterns to identify signs of problem gambling and reaching out with relevant information and support resources where appropriate.
• Marketing communications: Sending you information about hijau88 promotions, bonuses, and platform updates that may interest you — you can unsubscribe from marketing communications at any time through your account settings or by contacting us.
• Platform improvements: Analysing usage data in aggregate (not at an individual level) to understand how Malaysian players use hijau88 and to improve the overall user experience on our platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), hijau88 processes your personal data on the following legal bases, depending on the purpose of processing:

• Contract performance: Processing necessary to fulfil the agreement between you and hijau88 — including account management, transaction processing, and the provision of the gaming services you signed up for.
• Legal obligation: Processing required to comply with applicable Malaysian law, including identity verification requirements, financial reporting, and anti-money laundering obligations.
• Legitimate interests: Processing for the purposes of fraud prevention, platform security, and responsible gambling monitoring — where these interests do not override your fundamental privacy rights.
• Consent: For marketing and optional communications such as hijau88 promotional notifications, we rely on the consent you provided during registration or subsequently through your communication preference settings.

You have the right to withdraw your consent for consent-based processing at any time, without affecting the lawfulness of processing that took place prior to withdrawal. Withdrawing consent for marketing communications will not impact your access to hijau88 services.

Hijau88 does not sell, rent, or disclose members' personal data to third parties for their own marketing purposes. However, in the ordinary course of our business operations, there are situations where hijau88 needs to share your personal data with certain parties:

• Payment providers: Required transaction data is shared with authorised Malaysian payment providers — including DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay and the FPX network — to process your deposits and withdrawals. These providers are bound by strict confidentiality agreements.
• Gaming software providers: Required game session data is shared with authorised game providers to operate Live Casino, Baccarat, poker, slots and other games. These providers are required to comply with international data protection standards.
• Identity verification service providers: Identity data required for KYC is shared with authorised third-party verification services strictly for verification purposes.
• Competent authority: hijau88 is legally required to disclose personal data to Malaysian authorities when ordered by a court or required under applicable law — including agencies involved in anti-money laundering enforcement and financial crime investigations.
• Professional advisors: Lawyers, accountants, and auditors bound by professional and legal confidentiality obligations, where required for legal or audit purposes.

All third parties that receive personal data from hijau88 are required to handle that data in accordance with data protection standards equivalent to or higher than those of hijau88. We maintain records of all data sharing and conduct regular reviews of our partners' privacy practices.

Hijau88 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL encryption: All communication between your browser and hijau88 servers is encrypted using TLS 1.3 protocol with AES-256 encryption. This means no third party can read any data transmitted during your session on hijau88.
• Encryption of data at rest: Sensitive personal data — including identification details and financial information — is encrypted at rest in our databases, not only during transmission.
• Two-factor authentication (2FA): hijau88 provides two-factor authentication for all member accounts. We strongly encourage all Malaysian players to enable 2FA as an important additional layer of security.
• Role-based access control: hijau88 staff only have access to the personal data necessary to carry out their respective duties. No staff member has unrestricted access to all member data.
• Continuous security monitoring: The hijau88 cybersecurity team monitors the platform around the clock using intrusion detection systems and real-time threat analytics to identify and respond to any threats promptly.
• Regular security testing: hijau88 conducts regular penetration testing and security audits carried out by independent cybersecurity firms to identify and address any vulnerabilities in our systems.
• Staff training: All hijau88 staff who handle personal data undergo comprehensive data protection training and are required to comply with strict internal data usage policies.

While hijau88 takes all reasonable steps to protect your data, no online system can guarantee absolute 100% security. You also play an important role in keeping your account safe by using a strong password, enabling 2FA, and never sharing your login credentials with anyone.

Hijau88 only retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required under applicable Malaysian law. The following are our data retention guidelines:

• Active account data: Retained for the duration your hijau88 account remains active, plus any additional period required for legal compliance following account closure.
• Financial transaction records: Retained for a minimum of seven (7) years from the transaction date, in accordance with Malaysian financial and tax legal requirements.
• Gaming records: Retained for a minimum of twelve (12) months for dispute resolution purposes, and up to seven (7) years for financial-related records.
• KYC documents: Retained for a minimum of five (5) years following account closure, in accordance with anti-money laundering requirements.
• Support communication logs: Retained for two (2) years for reference and service improvement purposes.
• Marketing data: Retained until you withdraw consent for marketing communications or close your account.

Once your personal data is no longer required, hijau88 will securely delete or anonymise it using methods that ensure the data cannot be recovered. Anonymised data that no longer identifies you personally may be retained for analytics and service improvement purposes.

Hijau88 uses cookies and similar tracking technologies to enhance your experience on our platform. Below are the types of cookies we use and their purposes:

You can manage or disable optional cookies through your browser settings at any time. However, disabling certain cookies may affect the functionality and user experience of the hijau88 platform. hijau88 does not use third-party cookies for marketing or cross-site tracking purposes.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by hijau88. We fully respect these rights and are committed to making them easy for you to exercise:

• Right of access: You have the right to request a copy of the personal data we hold about you. hijau88 will provide this data in a readable format within 30 working days of receiving your request.
• Right to rectification: You have the right to request the correction of any inaccurate or incomplete personal data. For basic account information, you can update it directly through your hijau88 account settings.
• Right to erasure: Under certain circumstances, you have the right to request the deletion of your personal data. Please note that some data may need to be retained to fulfil legal obligations even after account closure.
• Right to restriction of processing: You have the right to request a restriction on the processing of your data in certain circumstances — for example, while the accuracy of disputed data is under investigation.
• Right to data portability: You have the right to receive the personal data you have provided to hijau88 in a structured, machine-readable format for transfer to another data controller.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. This right also applies to processing based on legitimate interests in certain circumstances.
• Right to withdraw consent: For processing that relies on your consent, you have the right to withdraw that consent at any time without affecting the validity of any processing carried out prior to withdrawal.

To exercise any of the rights above, please contact the hijau88 privacy team by email at support@hijau88.best, stating the right you wish to exercise and the information needed to process your request. We will verify your identity before processing any privacy rights request to ensure the security of your data.

Hijau88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or service improvements. Whenever this policy is amended, the latest update date will be displayed at the top of this page.

For significant amendments that may materially affect your privacy rights, hijau88 will endeavour to provide reasonable advance notice via email to all registered members, or through an in-platform notification, before the changes take effect. Your continued use of the hijau88 platform after the effective date of any amendment will be taken as your acceptance of the updated policy.

We recommend reviewing this Privacy Policy page periodically to stay informed of how hijau88 handles your personal data. If you do not agree with any amendments, you may close your account by contacting the hijau88 support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way hijau88 handles your personal data, please reach out to us through the following channels:

• Privacy email: support@hijau88.best — please state "Privacy Enquiry" in the subject line of your email
• Live chat: Available 24 hours a day, 7 days a week, directly from the hijau88 platform in Bahasa Malaysia
• Response time: hijau88 is committed to responding to all privacy-related enquiries within 2 business days

For more formal data rights requests — such as data access or deletion requests — we may need to verify your identity before processing. This is a standard security measure to protect your data from unauthorised requests.

If you believe hijau88 has not handled your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia, which is the authorised regulatory body for PDPA-related matters in Malaysia.