Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is published by Hijau88 ("Hijau88", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at hijau88.cam. This Policy describes how Hijau88 collects, processes, stores, shares, and protects personal data belonging to users ("you", "Player", "data subject") of the platform.

Hijau88 serves players across Malaysia including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other locations. We take data protection seriously and operate in a manner consistent with applicable data protection principles, including those reflected in Malaysia's Personal Data Protection Act 2010 ("PDPA") and relevant international standards.

By registering an account, depositing funds, or otherwise using the Hijau88 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not consent to any part of this Policy, you should not use the Hijau88 platform.

2. Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings defined below:

• "Personal Data" — any information that identifies or could reasonably identify a natural person, directly or indirectly, including name, identification number, contact details, financial data, and device identifiers.
• "Processing" — any operation performed on personal data, including collection, storage, use, modification, disclosure, and deletion.
• "Data Controller" — Hijau88, as the entity that determines the purposes and means of processing personal data collected through the platform.
• "Data Processor" — a third party that processes personal data on behalf of Hijau88 strictly under contractual instruction and data processing agreements.
• "KYC Data" — identity and age verification documents provided by Players including government-issued identity cards (MyKad), passports, proof of address, and associated selfie photographs.
• "Cookies" — small data files placed on a user's device by the Hijau88 platform for the purposes of session management, analytics, and security.
• "Platform" — the Hijau88 website, mobile web interface, and all associated services available at hijau88.cam.

3. Data We Collect

Hijau88 collects the following categories of personal data from Players:

Hijau88 does not collect sensitive personal data (such as racial or ethnic origin, religious beliefs, or health data) unless specifically required for responsible gambling compliance purposes and with your explicit consent.

4. How We Collect Data

Hijau88 collects personal data through the following means:

• Direct Provision: Data you voluntarily provide during account registration, KYC submission, deposit or withdrawal requests, support interactions, and feedback submissions.
• Automated Technical Collection: Data collected automatically when you access the platform, including IP address, device identifiers, session data, and behavioural analytics through our platform infrastructure and first-party cookies.
• Payment Processors: Transaction confirmation data received from Malaysian payment networks including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong Bank when you make a deposit or withdrawal.
• Identity Verification Services: Where required for KYC compliance, Hijau88 may use licensed third-party identity verification providers who return a verification result; raw document data is processed in accordance with applicable data agreements.
• Fraud and AML Screening: Data may be cross-referenced with third-party anti-fraud and anti-money laundering screening services as required by our compliance obligations.

5. Purposes of Data Processing

Hijau88 processes personal data only for the following defined and lawful purposes:

1. Account Creation and Management: To register your account, verify your identity, and provide access to the platform's services.
2. Transaction Processing: To process deposits, withdrawals, and related financial transactions in MYR and cryptocurrency through Malaysian payment channels.
3. Regulatory Compliance: To fulfil obligations under applicable anti-money laundering (AML), Know Your Customer (KYC), and responsible gambling regulations, including mandatory record-keeping and reporting requirements.
4. Platform Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, collusion, multi-accounting, and other prohibited conduct as defined in our Terms & Conditions.
5. Customer Support: To handle enquiries, complaints, and disputes raised through our support channels.
6. Responsible Gambling: To implement self-exclusion requests, deposit limits, cooling-off periods, and other responsible gambling measures; to identify markers of harm and apply protective measures.
7. Platform Improvement: To analyse anonymised or aggregated platform usage data for the purpose of improving platform performance, stability, and user experience.
8. Marketing Communications: Where you have provided explicit consent, to send promotional information about Hijau88 bonuses, events, and platform updates. You may withdraw marketing consent at any time by contacting support.

6. Legal Basis for Processing

Hijau88 relies on the following legal bases for processing personal data:

• Contractual Necessity: Processing required to perform the contract between Hijau88 and the Player — including account management, transaction processing, and KYC — is carried out on the basis of contractual necessity.
• Legal Obligation: Processing required to comply with applicable law, including AML obligations, age verification requirements, and regulatory reporting, is carried out on the basis of legal obligation.
• Legitimate Interests: Processing for fraud prevention, platform security, and anonymised analytics is carried out on the basis of Hijau88's legitimate interests, balanced against the Player's rights and expectations.
• Consent: Processing for marketing communications is carried out solely on the basis of your explicit, freely given consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

7. Cookies & Tracking Technologies

Hijau88 uses first-party cookies and similar tracking technologies to operate the platform effectively. We do not use third-party advertising cookies, cross-site tracking pixels, or social media tracking scripts.

The cookies deployed by Hijau88 fall into the following categories:

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the platform. Disabling functional or analytics cookies will not prevent you from using Hijau88 but may affect your experience.

8. Data Sharing & Disclosure

Hijau88 does not sell, rent, or otherwise commercially transfer your personal data to third parties. Data is shared only in the following strictly controlled circumstances:

• Licensed Service Providers: Third-party providers engaged by Hijau88 under binding data processing agreements to provide specific services including payment processing (DuitNow, FPX, e-wallet operators), identity verification, IT infrastructure, fraud screening, and customer support tools. These providers may only process your data on Hijau88's instruction and may not use it for their own purposes.
• Regulatory and Legal Authorities: Where required by applicable law, court order, or regulatory demand, Hijau88 may be obligated to disclose personal data to Malaysian authorities, international regulators, or law enforcement agencies. We will notify you of such disclosure where legally permitted to do so.
• Corporate Transactions: In the event of a merger, acquisition, or sale of assets involving Hijau88, personal data may be transferred to the successor entity subject to equivalent data protection standards. Players will be notified of any such transfer in advance.
• Responsible Gambling Networks: Where a Player has elected self-exclusion, limited data may be shared with recognised responsible gambling exclusion registries to give effect to that exclusion across participating platforms.

All third-party data processors are contractually bound to process data solely as instructed by Hijau88 and to implement appropriate technical and organisational security measures.

9. Data Retention

Hijau88 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to overriding legal and regulatory retention obligations. The following general retention periods apply:

• Account Data and Transaction Records: Retained for a minimum of five (5) years from the date of account closure or last transaction, as required by applicable AML and financial record-keeping regulations.
• KYC Documentation: Retained for a minimum of five (5) years from the date of verification, in compliance with identity verification obligations.
• Support Communications: Retained for three (3) years from the date of the relevant interaction, unless a longer period is required for dispute resolution purposes.
• Marketing Consent Records: Retained for the duration of the marketing relationship plus two (2) years following withdrawal of consent, to evidence compliance.
• Technical and Analytics Data: Anonymised or aggregated data may be retained indefinitely; identifiable technical data is deleted within twelve (12) months.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with our data destruction procedures. Players may request early deletion subject to the requirements of Section 12.

10. Data Security

Hijau88 implements a multi-layered security framework to protect personal and financial data against unauthorised access, disclosure, alteration, and destruction. Our security measures include, but are not limited to:

• Encryption in Transit: All data transmitted between your device and the Hijau88 platform is protected by TLS 1.3 / 256-bit SSL encryption.
• Encryption at Rest: Sensitive personal data and financial records stored on Hijau88 infrastructure are encrypted using AES-256 encryption.
• Access Controls: Access to player data systems is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication.
• Penetration Testing: Hijau88 conducts regular security assessments and penetration testing on platform infrastructure to identify and remediate vulnerabilities.
• Incident Response: Hijau88 maintains a documented data breach response procedure. In the event of a breach affecting your personal data, we will notify relevant authorities and affected Players in accordance with applicable law.

11. International Data Transfers

Hijau88 operates with infrastructure and service providers that may be located outside of Malaysia. Where personal data is transferred to jurisdictions outside Malaysia, Hijau88 ensures that appropriate safeguards are in place to maintain an equivalent level of protection to that afforded under Malaysian data protection law.

Safeguards employed for international transfers include:

• Contractual data processing agreements incorporating standard data protection clauses;
• Transfers only to jurisdictions that maintain adequate data protection standards comparable to Malaysia's PDPA;
• Assessment of third-party security practices prior to engagement.

By using the Hijau88 platform, you consent to the transfer of your personal data to jurisdictions outside Malaysia where required for the legitimate operation of the platform and delivery of its services, subject to the safeguards described above.

12. Your Rights as a Data Subject

Subject to applicable law and certain limitations, you have the following rights in relation to your personal data held by Hijau88:

To exercise any of the above rights, please contact our support team via live chat or email at [email protected]. Hijau88 will respond to all verifiable data subject requests within 30 calendar days of receipt. We may require identity verification before processing your request to protect against unauthorised data access.

Where Hijau88 is unable to fulfil a data subject request — for example, where legal retention obligations require us to retain the data — we will explain the reasons in writing.

13. Children & Minors

The Hijau88 platform is strictly restricted to individuals aged 21 years and above. Hijau88 does not knowingly collect personal data from any person under the age of 21. If we become aware that personal data has been collected from an underage individual, we will immediately close the associated account, refund unspent verified funds subject to applicable checks, and delete the relevant personal data without undue delay.

If you believe that a minor may have registered an account or provided personal data to Hijau88, please contact our support team immediately via live chat. We will investigate and take appropriate action promptly.

14. Third-Party Links

The Hijau88 platform may contain references to third-party services, payment providers, or information sources. This Privacy Policy applies solely to the Hijau88 platform and does not extend to any third-party websites, applications, or services. Hijau88 is not responsible for the privacy practices or content of any third-party services you may access in connection with your use of the platform.

We encourage you to review the privacy policies of any third-party service providers — including your bank, e-wallet provider, or payment processor — whose services you use in connection with Hijau88 transactions.

15. Policy Amendments

Hijau88 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or our data processing practices. Material changes will be communicated to registered Players by email or platform notification prior to taking effect.

The date of the most recent revision is displayed prominently at the top of this page. Your continued use of the Hijau88 platform following notification of any material change constitutes acceptance of the revised Policy. If you do not accept the revised Policy, you must discontinue use of the platform and contact support to close your Account.

16. Contact Us

For all privacy-related enquiries, data subject access requests, complaints, or questions regarding this Privacy Policy, please contact Hijau88 through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the Hijau88 platform interface. Privacy enquiries are flagged as priority and routed to our data compliance team. Target response: under 2 minutes to initial acknowledgement.
• Email: [email protected] — please include "Privacy Request" or "Data Subject Request" in the subject line. Responses within 2 business days of receipt.

Where you are unsatisfied with Hijau88's response to a privacy complaint, you may refer the matter to the relevant data protection authority in your jurisdiction. Malaysian residents may contact the Department of Personal Data Protection (JPDP) Malaysia for guidance.