Privacy Policy HPM99 — Data Protection & Your Information Security

1 Introduction

HPM99 takes our responsibilities as a data controller seriously. As an online gaming platform serving users in Malaysia, we understand the trust you place in us when you register and share your personal information.

This Privacy Policy is written in plain language, free of confusing legal jargon, so you truly understand what happens to your information — not just clicking "Accept" without knowing what you've agreed to.

We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards. If any section is unclear, our team is available to answer your questions via 24-hour live chat.

2 Information We Collect

We collect only the information necessary to provide safe, high-quality services. Below are the categories of data collected:

3 How We Use Your Data

Every piece of data we collect serves a purpose. We do not collect data 'just in case it might be useful later.' Here are the primary ways we use your information:

• Account management — registering and maintaining your account, including required KYC processes.
• Transaction processing — processing deposits, withdrawals, and bonus payments securely and accurately.
• Platform security — detecting and preventing fraud, unauthorised access, and account abuse.
• Customer support — helping resolve account issues and responding to your enquiries effectively.
• Responsible gaming — monitoring gameplay patterns to identify early signs of problem gambling and offer appropriate support.
• Product improvement — analysing aggregated usage data to improve the platform experience.
• Legal compliance — fulfilling the reporting and audit requirements set by relevant authorities.

We do not use your data for third-party advertising or sell it to other companies for marketing purposes.

4 Sharing Information with Third Parties

Hpm99 does not sell, rent, or disclose your personal data to third parties without your consent, except in the following circumstances:

• Service providers — such as payment gateways, game providers, and cloud services we use to operate the platform. All such parties are bound by strict confidentiality agreements.
• Legal requirements — when required by a court, law enforcement agency, or competent regulatory authority.
• Fraud prevention — sharing necessary information with industry bodies to prevent cross-platform fraud.
• Business transfers — in the event of a merger, acquisition, or asset sale, where users will be notified in advance.

5 Cookies & Tracking Technologies

The hpm99 platform uses cookies and similar technologies to enhance your experience. Below are the types of cookies we use:

• Essential Cookies — required for core platform functions such as staying logged in and session security. Cannot be disabled.
• Performance Cookies — collecting anonymised analytical data to help us understand how users interact with the platform.
• Functional Cookies — saving your preferences such as language and display settings for a more convenient experience.

You can manage your cookie settings through your browser at any time. However, disabling essential cookies may affect platform functionality.

We do not use third-party ad tracking cookies. Information about your browsing behaviour on the hpm99 platform remains exclusively under our control.

6 Data Security

Data security is an investment, not a cost. hpm99 implements multiple layers of technical and procedural protection to keep your information safe at all times:

• 256-bit SSL Encryption on all communications between your device and our servers.
• Data-at-rest encryption for sensitive information stored in our databases.
• Two-factor authentication (2FA) available and encouraged for all accounts.
• 24/7 Monitoring by a security team that monitors suspicious activity in real time.
• Penetration testing conducted periodically by independent security experts.
• Internal access controls strictly — only staff who need access may view user data, and every access is logged.

7 Data Retention Period

Hpm99 does not retain your personal data longer than necessary. The following are general data retention guidelines we follow:

• Active account data — retained for as long as your account is active and for a minimum of 7 years after account closure to meet legal requirements.
• Financial transaction records — retained for a minimum of 7 years in accordance with financial reporting and anti-money laundering (AML) requirements.
• Technical and security logs — retained for 12 months for security incident investigation purposes.
• Support communication data — retained for 3 years for service reference and improvement.

Upon expiry of the relevant retention period, data will be securely deleted or anonymised in accordance with established procedures.

8 Your Rights as a User

Under Malaysia's PDPA and hpm99's policies, you have the following rights regarding your personal data. All requests can be submitted via our live chat or support email:

We will respond to all valid requests within 30 working days. If your request is complex, we will notify you within 7 days.

9 International Data Transfers

To deliver reliable, high-performance services, some data may be processed or stored on servers located outside Malaysia. This includes cloud services and infrastructure from international game providers.

In all cases of international data transfers, hpm99 ensures that:

• The recipient country or entity maintains an adequate level of data protection.
• Appropriate standard data transfer agreements have been put in place.
• Additional security measures are applied for data transfers to jurisdictions requiring enhanced protection.

10 Changes to This Privacy Policy

Hpm99 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new platform features.

When significant changes occur, we will:

• Displaying a clear notice on the platform's main page.
• Sending a notification to your registered email address (for material changes).
• Updating the "Last Updated" date at the top of this document.

Continued use of the platform after the effective date of any changes constitutes your acceptance of the updated terms. We encourage you to review this page periodically.

11 Contact Us About Privacy

If you have any questions, concerns, or wish to exercise your rights regarding your personal data, please contact the hpm99 Data Protection Officer:

You also have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP) if you believe your rights under the PDPA have not been respected.