Helo88 Privacy Policy — Member Personal Data Protection

1 Introduction

Helo88 is an online gaming platform operating for users in Malaysia. We understand that privacy is not merely a formality — it is a fundamental right of every user. This Privacy Policy has been crafted to ensure you fully understand how your personal data is managed when you use any helo88 service, whether through the desktop website, mobile browser or our app.

We comply with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data management. Every data-related decision we make consistently prioritises the interests and security of our members.

This policy applies to all information we collect through the helo88 platform, including during the account registration process, identity verification (KYC), financial transaction processing, interactions with the customer support team, and general use of our platform from time to time.

2 Data We Collect

Helo88 only collects data that is genuinely necessary to provide a safe, efficient and legally compliant service. The following are the categories of data we collect:

We do not collect sensitive data such as medical information, political views or religious beliefs. Biometric data such as fingerprints or facial scans are not collected unless you choose to use them as an additional authentication method on your own device.

3 How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. helo88 uses your personal data for the following purposes:

• Account Management: Creating, maintaining, and protecting your helo88 account, including the login process, identity verification, and account recovery.
• Transaction Processing: Handling all deposits, withdrawals, and other financial transactions safely and efficiently through supported payment channels.
• Legal Compliance: Fulfilling obligations under PDPA 2010, anti-money laundering (AML) requirements, Know Your Customer (KYC) policies, and directives from any relevant authorities.
• Platform Security: Detecting and preventing fraud, money laundering, multiple account usage, and any activity that violates our Terms and Conditions.
• Customer Support: Providing accurate and effective assistance when you contact our support team via live chat or other channels.
• Service Improvement: Analysing platform usage patterns in aggregate to improve user experience, platform speed, and content relevance.
• Marketing Communications: Sending information about relevant promotions, bonuses, and exclusive offers — only to members who have agreed to receive such communications.

Helo88 does not use your data for any purpose not stated above without obtaining your consent first. If we wish to use your data for a new purpose, you will be informed and given the option to agree or decline.

4 Data Sharing

Helo88 understands that your trust is our most valuable asset. We do not share, sell or disclose your personal data to third parties for their own commercial purposes. However, there are limited situations where data sharing is necessary and legally permissible:

• Payment Service Providers: Transaction information that must be shared with authorised payment processors such as FPX, DuitNow, Touch 'n Go, GrabPay and Boost solely for the purpose of processing your transactions.
• Technology Service Providers: Companies providing the technical infrastructure for our platform, including cloud computing services, are bound by strict confidentiality agreements.
• Game Providers: Minimal game session data required to be shared with licensed game software providers to ensure a smooth and fair gaming experience.
• Legal Authorities: Information that must be disclosed under court orders, directions from law enforcement authorities, or valid legal compliance requirements.
• Third-Party Identity Verification: A certified e-KYC service that helps us verify the identity of new members securely and efficiently.

In the event of a company merger, acquisition or asset sale, user data may be transferred as part of that transaction. In such circumstances, members will be notified in advance and the new entity will be bound to honour this Privacy Policy.

5 Encryption & Security

Helo88 invests seriously in security infrastructure to ensure the personal and financial data of members is always protected. The following are the technical security measures we have implemented:

• 256-bit SSL/TLS Encryption: All data communications between your device and helo88 servers are protected by 256-bit SSL/TLS encryption — the same standard used by leading banking institutions.
• Two-Factor Authentication (2FA): Members are encouraged and able to activate 2FA for an additional layer of security to protect their account from unauthorised access.
• 24/7 Monitoring: The helo88 security monitoring system operates around the clock to detect and respond to any security threats in real time.
• Encrypted Data Storage: All sensitive data stored in our database uses end-to-end encryption. Passwords are never stored in plain text.
• Regular Security Audits: The helo88 platform undergoes regular independent security audits by certified cybersecurity firms to ensure there are no system vulnerabilities that could be exploited.
• Internal Access Controls: Access to member data by helo88 staff is governed by the principle of least privilege — only staff who genuinely require access to carry out their duties are authorised.

6 Cookies & Tracking

Helo88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functionality such as login sessions and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting anonymous information about how you use our platform to help us understand usage patterns and improve performance.
• Functionality Cookies: Saving your preferences and settings such as language, currency, and display preferences to provide a more personalised experience.
• Analytics Cookies: Helping us understand how members interact with various sections of our platform through aggregated, non-individually identifiable data.

You can manage or delete cookies through your browser settings. However, disabling certain cookies may affect the functionality and your experience on the helo88 platform. By visiting our platform, you agree to the use of cookies as described in this policy.

7 Data Storage

Helo88 retains your personal data for as long as your account is active or as long as necessary to provide services to you. Once an account is closed, we retain certain records in accordance with applicable legal requirements.

• Financial Transaction Data: Retained for a minimum of 7 years in accordance with Malaysia's tax and AML legal requirements.
• KYC Records and Identity Verification: Retained for 5 years after account closure or the period specified by the relevant authorities.
• Support Communication Logs: Retained for 2 years for reference and service improvement purposes.
• Game Session Data: Retained for 90 days in detailed format; aggregated, de-identified versions are kept for long-term analytics.
• Marketing Data: Deleted within 30 days after you withdraw your marketing consent.

The primary helo88 servers storing Malaysian member data are hosted in certified cloud computing zones with multi-layered physical and digital protection. All cross-border data transfers use protection mechanisms that comply with international standards.

8 Your Rights

Under the Malaysian Personal Data Protection Act 2010 and helo88's internal policies, you have the following rights regarding your personal data:

To exercise any of the above rights, contact the helo88 support team via the platform's live chat or submit a written request to us. We will respond within 14 business days from the date your request is received.

9 Children's Privacy

Helo88 is a gaming platform strictly limited to individuals aged 18 years and above. We do not intentionally collect, store or process personal data from individuals under the age of 18.

If we discover that personal data of someone under the age of 18 has been collected without our knowledge, we will:

• Immediately delete all personal data related to that individual from our systems.
• Permanently closing the relevant account.
• Taking appropriate action in accordance with applicable child protection laws.

10 Policy Changes

Helo88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements or new platform features.

When material changes are made, helo88 will:

• Updating the "Last Updated" date displayed at the top of this page.
• Displaying a clear notice on the platform's home page for a minimum of 7 days.
• For highly significant changes, sending a direct notification to members via their registered email.

Continued use of the helo88 platform after any amendments to this Privacy Policy constitutes your acceptance of the updated version. If you do not agree with the changes made, you have the right to close your account and request deletion of your personal data, subject to applicable legal obligations.

11 Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your personal data, the helo88 privacy team is ready to assist you.

You can reach us via:

• Live Chat: Available 24 hours a day, 7 days a week on the helo88 platform — the fastest way to get immediate assistance.
• Privacy Email: [email protected] — for written enquiries requiring a detailed response.

We are committed to responding to all privacy-related enquiries within 3 working days. For formal requests relating to data access rights or data deletion, the processing period is up to 14 working days from the date your identity verification is completed.