256-bit SSL Encryption
All data transmitted between your device and h2m servers is protected by banking-grade 256-bit SSL encryption, ensuring your information remains inaccessible to unauthorized parties.
Secure Data Storage
All member personal data is stored on servers protected by multi-layered security systems. Database access is strictly limited to authorized personnel only, verified through two-factor authentication.
No Sharing Without Consent
H2m does not sell, rent, or share your personal information with any third party for marketing purposes without your prior consent. Your data belongs entirely to you.
Full Control in Your Hands
You have the right to access, correct, or request deletion of your personal data at any time. h2m provides a simple and transparent process for managing the personal information we hold about you.
PDPA Compliance
H2m operates in accordance with Malaysia's Personal Data Protection Act (PDPA). Every aspect of our data handling is designed to ensure full compliance with applicable legal requirements.
Flexible Communication Options
You can choose the types of marketing communications you wish to receive from h2m, including promotional emails and platform notifications. Unsubscribe options are available at any time through your account settings.
1 Introduction and Scope of This Policy
Welcome to the h2m Privacy Policy. We understand that trust is the foundation of every relationship, and trust starts with transparency about how we handle your information. This Privacy Policy is written in plain language because we believe every member deserves to know exactly what happens to their data.
This policy applies to all personal information collected by h2m through our official website at h2m.app, the h2m mobile app, and any interactions with our customer support team. By registering as a member or using any h2m service, you agree to the terms set out in this Privacy Policy.
We will update this Privacy Policy from time to time when there are changes to how we handle data or when legal changes require adjustments. Any material updates will be communicated to members via the platform before they take effect.
2 Information We Collect
H2m only collects information necessary to provide you with the best service. Below are the categories of data we collect and the purposes for collection:
| Data Category | Examples of Information | Primary Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, MyKad / passport number | Identity verification (KYC), fraud prevention |
| Contact Data | Email address, phone number, residential address | Account communications, transaction verification |
| Financial Data | Bank account number, e-wallet details | Deposit and withdrawal processing |
| Technical Data | IP address, device type, web browser, operating system | Account security, suspicious activity detection |
| Usage Data | Game history, betting records, session duration | Platform improvements, responsible gaming |
| Communication Data | Live chat conversation records, support tickets | Customer service improvements |
We do not collect information beyond what is needed for the purposes stated above. There is no need to worry — credit card numbers or sensitive payment information are not stored directly on h2m's servers; they are processed through certified payment gateways.
3 How We Use Your Information
Every piece of data we collect has a clear purpose. h2m uses your personal information for the following:
- Account management: Creating, maintaining, and securing your h2m account, including the secure login process and two-factor authentication.
- Transaction processing: Verifying and processing all deposits and withdrawals accurately and securely via encrypted payment channels.
- KYC verification: Meeting Know Your Customer (KYC) requirements set by financial authorities to prevent fraud and money laundering.
- Service communications: Sending important notifications related to your account, transactions, promotions you have subscribed to, and security updates.
- Platform improvements: Analysing aggregated (not individual) usage patterns to improve user experience and platform performance.
- Security and fraud prevention: Detecting suspicious activity, preventing unauthorised access, and protecting the platform's integrity from abuse.
- Legal compliance: Fulfilling reporting and record-keeping obligations required by applicable laws and authorities.
4 Information Sharing and Disclosure
H2m does not sell your personal information. However, there are limited situations where we need to share your data with certain parties to enable our services to function properly:
- Payment service providers: Payment gateways and financial institutions that process your deposit and withdrawal transactions. They are bound by strict confidentiality agreements.
- Game software providers: Game developers who supply content to h2m may receive limited technical data necessary to ensure games function correctly.
- Cloud service providers: Cloud computing infrastructure used by h2m to store and process data, operating to the highest security standards.
- Competent authorities: h2m will disclose information to law enforcement or financial authorities when required to do so by law or a valid court order.
- Professional advisors: Lawyers, accountants, and audit consultants bound by professional confidentiality obligations.
In all of the above cases, h2m ensures that only the necessary data is shared, and that all third parties involved maintain adequate data protection measures.
5 Cookies and Tracking Technologies
H2m uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse the h2m website. Below are the types of cookies we use:
- Essential cookies: Required for core platform functions such as login session management and security. These cookies cannot be disabled.
- Performance cookies: Helps us understand how members use the platform so we can make improvements. Data is collected anonymously.
- Functional cookies: Remembering your preferences such as language and display settings to deliver a more personalised experience.
- Marketing cookies: Used to display relevant promotions and offers based on your interests on the h2m platform. You can disable these cookies through your browser settings.
You can manage cookie usage through your web browser settings. Please note that disabling essential cookies may affect certain features of the h2m platform. For more information on managing cookies, refer to your browser's help guide.
6 h2m Data Security Measures
Your data security is h2m's highest priority. We continuously invest in security infrastructure to ensure your information is always protected. Our security measures include:
- Data encryption in transit using TLS 1.3 and 256-bit SSL protocols.
- Data encryption at rest using AES-256 standard encryption algorithms.
- Two-factor authentication (2FA) enabled for admin access and member accounts.
- Round-the-clock security monitoring by a dedicated cybersecurity team.
- Regular penetration testing conducted by independent security auditors.
- Mandatory security awareness training for all h2m staff with access to data.
- An automated, encrypted data backup system for recovery in the event of an incident.
7 Your Rights Regarding Personal Data
As an h2m member, you have the following rights regarding your personal data, in accordance with Malaysia's Personal Data Protection Act 2010:
Right to Access
You have the right to request a copy of the personal data we hold about you at any time.
Right to Rectification
If your data is inaccurate or incomplete, you may request an immediate correction.
Right to Erasure
You may request deletion of your personal data, subject to our legal obligations.
Right to Object
You may object to the processing of your data for direct marketing purposes at any time.
Right to Data Portability
You have the right to receive your data in a machine-readable format for transfer.
Right to Restriction of Processing
You may request a temporary restriction on the processing of your data in certain circumstances.
To exercise any of the rights above, please contact the h2m support team via live chat or email at [email protected]. We will process your request within 30 working days.
8 Data Retention Period
H2m retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable law. Below are the general data retention guidelines:
- Active account data: Retained for the duration of your active membership with h2m.
- KYC and identity verification data: Retained for a minimum of 5 years after account closure, in line with anti-money laundering legal requirements.
- Financial transaction records: Retained for 7 years from the transaction date in accordance with Malaysia's tax and financial legal requirements.
- Security and activity logs: Retained for 12 months for investigation purposes in the event of a security incident.
- Customer support communication data: Retained for 2 years after case resolution.
Once the retention period expires, your data will be securely deleted or de-identified (anonymized) so it can no longer be personally linked to you.
9 Changes to This Privacy Policy
H2m reserves the right to amend or update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or service improvements. When material changes occur, we will:
- Displaying a clear notice on the h2m platform homepage.
- Updating the "Last Updated" date at the top of this document.
- Notifying members via their registered email address of any significant changes.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Continued use of the h2m platform after any changes are published constitutes acceptance of the updated terms.
Document Contents
Contact the Privacy Team
Have questions about how h2m handles your data? Our privacy team is here to help.